Does the Ghost Solution Suite product support TLS 1.2?

Products

• Ghost Solution Suite

Issue/Introduction

Created a silent.ini file by running Axinstall.exe -i command.  This walks you through the install GUI allowing selection of all the options and settings for install.  The resulting silent.ini is saved in same folder as location of Axinstall.exe and they use that file to run silent install:  Axinstall.exe -t silent.ini

While working on our GSS 3.3 RUx version, it seems that the Axinstall.exe will fail if TLS 1.0 is not enabled.  It fails to authenticate to the local SQL Server instance with TLS 1.2 enabled.

Does the Ghost Solution Suite product support TLS 1.2?

Environment

GSS 3.x

Resolution

Yes, the Ghost Solution Suite product versions 3.1 and newer do support TLS 1.2.

There is a caveat to this however as your 32-bit ODBC System DSN for the Altiris eXpress Database Data Source needs to use the SQL Server Native Client.

GSS doesn't support any other driver while using only TLS 1.2.

To open the 32-bit ODBC, go to C:\Windows\SysWOW64\odbcad32.exe.

Note: If you are using SQL Server 2012, please make sure you upgrade to SQL Server 2012 SP4.

Note: Regarding the AeXInstall.exe and silence switch example scenario above:

• SQL server 2016, 2017, 2019 do not require updates regarding the ODBC driver.
• So, SQL server 2016-2019 should be working correctly.
• New ODBC Driver for SQL server ("SQL Server Native Client 11.0") will be in place after update.

Information about needed updates can be found at Microsoft page:

TLS 1.2 support for Microsoft SQL Server

Note: You need to upgrade to SQL Server 2012 SP4 or later.

Additional Information

For DAgent to Ghost Solution Suite Server secure communication read: Enabling secure communication between DAgent and Ghost Solution Suite Server