How To: Enable TLS 1.2 Support in Windows 7

With the release of SOQL Studio 2020.1.282 we upgraded the targeted .NET Framework version to 4.7.2 to gain access to newer functionality and support for newer TLS standards.  .Net 4.7.2 handles TLS loading differently from the previously targeted .Net Framework version, 4.6.1.  This change only impacts those running SOQL Studio 2020.1.282 on Windows 7 and only if TLS 1.2 support hasn’t been enabled.  If you’re running on Windows 10 or Windows 8.x , you do not need to do anything because TLS 1.2 is supported and enabled in the OS by default.  While Windows 7 has built-in support for TLS 1.2, it is not enabled by default.

The procedures below show how to enable TLS 1.2 support at either the OS level or for just SOQL Studio.

Check for Current TLS 1.2 Support

Before we get into modifying anything, first check to see if TLS 1.2 support has already been enabled on your system.  This is easy once SOQL Studio 2020.1.282 has been installed.  If you get the following error when trying to connect to Salesforce, read on.  Otherwise, you are all set.

If you haven’t yet installed SOQL Studio, you can also check the registry for the presence of the TLS 1.2 key and its Client key’s parameters and data.  It should look like this:

If the ‘Enabled’ value is there it’s data must be set to ‘1’.

Option 1: Enable OS Support for TLS 1.2

Warning: Please use extreme caution! Making changes to the system registry incorrectly could cause system instability or render the system inoperative.  Always backup the registry before making changes to it. 

We recommend enabling TLS 1.2 support at the OS level, if at all possible.  To make this configuration change, you will need Administrator access to the system and will make the change using the Registry Editor.

1. Navigate to ‘HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols’
2. If you do not see the ‘TLS 1.2’ key
   1. Create it by right-clicking the Protocols key, selecting ‘New’ and then ‘Key’.  Name the key ‘TLS 1.2’
   2. Right click the ‘TLS 1.2’ key you just created and create a new key named ‘Client’
3. Expand the ‘TLS 1.2’ key and click the ‘Client’ key.  If the ‘Client’ key isn’t present, create it per 2.2 above.
4. With the ‘Client’ key selected, right-click in the pane on the right-hand side and select New, then DWORD.  Name it ‘DisabledByDefault’ and assign it a hex value of  ‘0’.
5. With the ‘Client’ key selected, right-click in the pane on the right-hand side and select New, then DWORD.  Name it ‘Enabled’ and assign it a hex value of  ‘1’.

Option 2: Enable TLS 1.2 for just SOQL Studio

If you cannot enable OS-wide support for TLS 1.2, you can enable it just for SOQL Studio by modifying the application’s config file. You will need Administrator access to the system to perform this change.

Navigate to the folder where you installed SOQL Studio.  By default this is ‘C:\Program Files (x86)\Visual Software Systems LLC\SOQL Studio’.  Edit SOQLStudio.exe.config.  Update the value of the AppContextSwitchOverrides node within Configuration\Runtime, setting Switch.System.Net.DontEnableSystemDefaultTlsVersions to true.  It should look like this:

Note: You will need to do this procedure every time you install a SOQL Studio update

More Information

Learn more about SOQL Studio by visiting our website.  If you’ve never tried SOQL Studio, or tried an older version, we encourage you to start a 30-day free trial of SOQL Studio 2020.1 today!

Free Upgrade

Current customers with an active maintenance contract are entitled to a free upgrade.  Login to you account, go to Downloads & Licenses and click the “Request Upgrade” button.  You’ll be emailed a new license for version 2020.1 and you can download the new package right from there.