Exchange 2013 and KB2992611 (SChannel MS14-066)

Currently the SChannel Fix (KB2992611) seems to cause problems with SQL and IIS servers. Various sources report problems connecting Chrome to IIS servers that have installed the update.

Exchange 2013 on Server 2012 R2 does not seem to have any problems with the update. OWA with Chrome and Internet Explorer work perfectly. So apparently all is well in my little Exchange world Smiley

However, Microsoft confirms problems with the new cipher suites:

https://support2.microsoft.com/kb/2992611/en-us

The new cipher suites can be conveniently deactivated with this IIS Crypto Tool:

https://www.nartac.com/Products/IISCrypto/Default.aspx

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_RSA_WITH_AES_256_GCM_SHA384
  • TLS_RSA_WITH_AES_128_GCM_SHA256

Leave a Comment