Does Exchange Reporter Plus support TLS v1.2 protocol?
Yes, Exchange Reporter Plus supports TLS v1.2. You can configure Exchange Reporter Plus to use this protocol exclusively by following the steps mentioned below. Please ensure that you have enabled SSL and applied an SSL certificate in Exchange Reporter Plus.
Steps to make Exchange Reporter Plus to use only TLS v1.2
Exchange Reporter Plus can be configured to use PostgreSQL and MS SQL databases. The steps to enable Exchange Reporter Plus to use only TLS 1.2 will vary depending on the database used.
For PostgreSQL database
Navigate to Settings > Admin > General Settings > Product Settings > Connection.
Under Connection Settings, select Enable SSL Port [https].
Go to Advanced.
Using the drop-down menu next to the TLS field, select only TLSv1.2.
Click Save to apply the changes.
Stop Exchange Reporter Plus.
Navigate to <installation_dir>/conf/, open the wrapper.conf file and modify, wrapper.java.additional.xx=-Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2 to wrapper.java.additional.xx=-Dhttps.protocols=TLSv1.2
Note: xx represents any integer; do not change it.
Restart Exchange Reporter Plus.
For MS SQL database
Before you proceed, check if your current installation of MS SQL Server supports TLS v1.2. If not, update your instance with the service pack here.
Navigate to Settings > Admin> General Settings> Product Settings> Connection.
Under Connection Settings, select Enable SSL Port [https].
Go to Advanced.
Using the drop-down menu next to the TLS field, select TLSv1.2 only.
Click Save to apply the changes.
Stop Exchange Reporter Plus.
Configure the logon credentials for SQL Server service with an admin account by following the steps mentioned below:
Open Microsoft Management Console by typing services.msc in Run window.
Right click the SQL Server service.
Click Properties.
Go to the Log On tab.
Under Log on as, select This account.
Enter the password and the confirmation password.
Click Apply to save the changes.
Generate a certificate using IIS Manager by following the steps mentioned below,
Open IIS Manager in the server where MS SQL is installed by typing inetmgr in Run window.
Select Server Certificates.
Select Create Self-Signed Certificate on the Actions window.
Provide a friendly name for the certificate, and let the Certificate Store be Personal.
Once done, the certificate will be installed in the Personal Certificate Store and will be available in the SQL Server Configuration Manager for Certificate Association.
Associate the certificate with your SQL server. Please note that to associate an SSL certificate to the MS SQL server, the certificate needs to be imported to the Personal Certificate Store. To import the certificate to the Personal Certificate Store, follow the steps mentioned below,
If a Self Signed Certificate is created through IIS, then it is automatically imported. If not, it should be imported manually using the following steps,
Open IIS Manager by typing inetmgr in Run window.
Select Server Certificates.
Select Import from the Actions window.
Browse the *.pfx file generated, ensuring that the certificate is associated with the private key.
Open SQL Server Configuration Manager.
Select SQL Server Network Configuration.
Right click Protocols and select Properties for the instance that you want to associate the certificate with.
In the Flags tab, select Force Encryption to YES.
In the Certificate tab, select the certificate using the drop-down.
Changes will be reflected only when the service is restarted. So, restart the SQL Server service.
Navigate to <installation_dir>/conf/. In the database_params.conf file, change url=jdbc:jtds:sqlserver://<server-name>:1434/DB6653_2;ssl=request to url=jdbc:jtds:sqlserver://<server-name>:1434/DB6653_2;ssl=require/authenticate. Here, <server-name> refers to the name of your Exchange Server.
Navigate to <installation_dir>/conf/, open the wrapper.conf file, and search for wrapper.java.additional and make the changes mentioned below,
Add wrapper.java.additional.xx=Djsse.enableCBCProtection=false
Add wrapper.java.additional.xx=-Djdk.tls.client.protocols=TLSv1.2
Change wrapper.java.additional.xx=-Dhttps.protocols=TLSv1 to wrapper.java.additional.xx=-Dhttps.protocols=TLSv1.2
Note: xx represents any integer; do not change it.
Download jtds-1.3.1.jar from this link and replace the downloaded JAR in <installation_dir>/lib.
Start Exchange Reporter Plus.
New to ADSelfService Plus?
Related Articles
How to configure the mail server in Exchange Reporter Plus?
Follow the steps below to configure the mail server in Exchange Reporter Plus, Navigate to Settings→ Admin → General Settings → Server Settings → Mail Settings. Enter the Server Name or IP address, port number, from, and admin email addresses (use ...Migrating Exchange Reporter Plus to a different server
Situations may arise in which you may want to move Exchange Reporter Plus from one machine to another. This document will guide you through the migration process. Note: Do not uninstall Exchange Reporter Plus from the old machine until the new ...How to install SSL certificates in Exchange Reporter Plus?
Follow the steps given below to install SSL certificates Exchange Reporter Plus, Step 1: Enable HTTPS in Exchange Reporter Plus Navigate to Settings > Admin > General Settings > Product Settings. Under Connection Settings, check the Enable SSL Port ...How to identify the current database of Exchange Reporter Plus?
Follow the steps given below to identify the current database of Exchange Reporter Plus , Navigate to <installation_dir>/conf/. In the database_params.conf file, you can find all database-related parameters. Check the name in the drivername ...How do I add custom LDAP attributes in Exchange Reporter Plus?
Exchange Reporter Plus allows you to add custom attributes from the extended AD schema to get more details from its reports. To associate your custom attributes with Exchange Reporter Plus, Navigate to Settings > Configuration> Exchange Server > LDAP ...