• Replies 6 replies
  • Subscribers 13 subscribers
  • Views 3897 views
  • Users 0 members are here
Options
Related

Does Content Matrix 8.9 use TLS 1.2 by default?

denis molodtsov
over 3 years ago

Does anyone know if Content Matrix 8.9 use TLS 1.2 by default?

We are running migrations from SP 2010 to SharePoint Online. When we connect to SPO, Content Matrix use TLS 1.2 by default? or it requires a change in the config file?

We looked into the C:\ProgramData\Metalogix\EnvironmentSettings.xml file, but it does not have anything related to the TLS

This is our current Config:

<XmlableTable>
<XmlableEntry>
<Key>AutoRefreshJobListIntervalInSeconds</Key>
<Value>30</Value>
</XmlableEntry>
<XmlableEntry>
<Key>ShowAutoGrantPermissionDialog</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>DateToShowLicenseAlert</Key>
<Value>01-Jan-0001</Value>
</XmlableEntry>
<XmlableEntry>
<Key>DaysToSuppressLicenseAlert</Key>
<Value>30</Value>
</XmlableEntry>
<XmlableEntry>
<Key>AllowDBWriting</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>IncludeFilteringColumnsInTerseData</Key>
<Value>True</Value>
</XmlableEntry>
<XmlableEntry>
<Key>TenantPersonalSiteCreationRetryCount</Key>
<Value>10</Value>
</XmlableEntry>
<XmlableEntry>
<Key>TenantPersonalSiteCreationWaitInterval</Key>
<Value>30000</Value>
</XmlableEntry>
<XmlableEntry>
<Key>UploadManagerAzureStorageConnectionString</Key>
<Value />
</XmlableEntry>
<XmlableEntry>
<Key>UploadManagerLocalTemporaryStorageLocation</Key>
<Value />
</XmlableEntry>
<XmlableEntry>
<Key>UploadManagerBatchSizeItemThreshold</Key>
<Value>200</Value>
</XmlableEntry>
<XmlableEntry>
<Key>UploadManagerMaxBatchesToUpload</Key>
<Value>4</Value>
</XmlableEntry>
<XmlableEntry>
<Key>UploadManagerBatchSizeMBSizeThreshold</Key>
<Value>1000</Value>
</XmlableEntry>
<XmlableEntry>
<Key>UploadManagerMaxRetryCountThresholdForJobResubmission</Key>
<Value>960</Value>
</XmlableEntry>
<XmlableEntry>
<Key>InternalTestingMode</Key>
<Value />
</XmlableEntry>
<XmlableEntry>
<Key>ResolvePrincipalsMethod</Key>
<Value>People</Value>
</XmlableEntry>
<XmlableEntry>
<Key>CleanAzureContainer</Key>
<Value>True</Value>
</XmlableEntry>
<XmlableEntry>
<Key>MigrateUnsupportedTypesOverPipeline</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>AllowPartialPipelineMigration</Key>
<Value>True</Value>
</XmlableEntry>
<XmlableEntry>
<Key>SupportedFileSizeInMBUsingMigrationPipeline</Key>
<Value>400</Value>
</XmlableEntry>
<XmlableEntry>
<Key>EnableChunkedTransfer</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>AllowIE7WebBrowserAuthentication</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>SQLQueryTimeoutTime</Key>
<Value>30</Value>
</XmlableEntry>
<XmlableEntry>
<Key>WebServiceTimeoutTime</Key>
<Value>500</Value>
</XmlableEntry>
<XmlableEntry>
<Key>WebServiceRetriesNumber</Key>
<Value>2</Value>
</XmlableEntry>
<XmlableEntry>
<Key>WebServiceRetriesDelay</Key>
<Value>5</Value>
</XmlableEntry>
<XmlableEntry>
<Key>CSOMDocumentRetriesNumber</Key>
<Value>0</Value>
</XmlableEntry>
<XmlableEntry>
<Key>CSOMDocumentRetriesDelay</Key>
<Value>0</Value>
</XmlableEntry>
<XmlableEntry>
<Key>CSOMMaximumExecuteQueryRetries</Key>
<Value>10</Value>
</XmlableEntry>
<XmlableEntry>
<Key>ChunkRetentionTime</Key>
<Value>30</Value>
</XmlableEntry>
<XmlableEntry>
<Key>ChunkStreamType</Key>
<Value>Memory</Value>
</XmlableEntry>
<XmlableEntry>
<Key>Allow2013DB</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>MMDTermsBatchSize</Key>
<Value>50</Value>
</XmlableEntry>
<XmlableEntry>
<Key>Show2007OMConnection</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>SupportedFileSizeWithoutChunk</Key>
<Value>200</Value>
</XmlableEntry>
<XmlableEntry>
<Key>ChunkSizeForLargeFilesInMb</Key>
<Value>100</Value>
</XmlableEntry>
<XmlableEntry>
<Key>BlobsStorageEncryptionKeyFile</Key>
<Value>encryption_key.dat</Value>
</XmlableEntry>
<XmlableEntry>
<Key>MaxAzureBatchRetryCount</Key>
<Value>2</Value>
</XmlableEntry>
<XmlableEntry>
<Key>ErrorMessagesForRetryAzureBatch</Key>
<Value />
</XmlableEntry>
<XmlableEntry>
<Key>RetryBatchForCustomListWithVersions</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>AzureAppClientId</Key>
<Value />
</XmlableEntry>
<XmlableEntry>
<Key>EnableConcurrentNWSOffice365Connections</Key>
<Value>False</Value>
</XmlableEntry>
<XmlableEntry>
<Key>RemotePowerShellScriptFilesLocation</Key>
<Value>C:\MetalogixScripts\</Value>
</XmlableEntry>
<XmlableEntry>
<Key>PipeCloseTimeout</Key>
<Value>15</Value>
</XmlableEntry>
<XmlableEntry>
<Key>PipeOpenTimeout</Key>
<Value>15</Value>
</XmlableEntry>
<XmlableEntry>
<Key>PipeReceiveTimeout</Key>
<Value>20</Value>
</XmlableEntry>
<XmlableEntry>
<Key>PipeSendTimeout</Key>
<Value>15</Value>
</XmlableEntry>
<XmlableEntry>
<Key>AllowMsGraphApiUsage</Key>
<Value>True</Value>
</XmlableEntry>
</XmlableTable>

  • over 3 years ago

    Hi Denis,

     

    By default CM exposes/supports TLS 1.0, 1.1, 1.2.  The end server gets the chance the decide which version to use for communication.

    Please see the following KB article, including the linked document referenced for supporting TLS 1.2 in Content Matrix.

    https://support.quest.com/metalogix-content-matrix/kb/262747/unable-to-connect-to-a-sharepoint-url-that-is-configured-with-tls-1-2-or-1-2-security-protocol

    Cheers,

    Theo

  • over 3 years ago in reply to theo lazaridis

    Hi Theo, thank you very much for the reply. I have looked through the KB and the document before asking the question here. The reason I am asking this question is that these didn't not contain any useful information that would answer our question.

    The Issue from 2017 refers to the 8.7 version.It says this:

    Currently, Content Matrix officially supports TLS 1.0 only.

    I think, this is no longer correct in 8.9, but I could not find any fresh documentation on the default TLS used.

    The KB document also seems outdated. For example:

    • It's from 2017
    • It's about 8.4 and 8.5 versions
    • it says: "In Content Matrix v.8.4.0.1 and earlier, if users tried to connect to a Secure SharePoint Site (https:///) they would be able to establish a connection to the environment if it was configured to use the TLS 1.0 security protocol or lower"
    • It says: "In Content Matrix version 8.5.0.1 and later, partial support has been added to allow users to connect to environments that are using TLS versions 1.1 and 1.2.."
      • What does partial mean? This sounds a little concerning.
    • It mentions C:\ProgramData\Metalogix\EnvironmentSettings.xml config file and SecurityProtocol node. It also says: The default value here is “0” and should not be changed unless necessary. Change the value to read as “4080”. This will add support for both TLS 1.1 and TLS 1.2.
      • We don't really have this node in our defualt config in our Content Matrix 8.9 envrionment.

    All of these snippets of information don't really help to understand these points:

    • What is the default TLS used by Content Matirx 8.9 when talking to SharePoint Online?
    • Is SecurityProtocol node available to be used? And why is it missing in the config file? Was it removed? If we add it and use the value 4080, will it force Content Matrix use TLS 1.1 or TLS 1.2?
    • SharePoint Online supports TLS 1.0, TLS 1.1, TLS 1.2, but which one is used by Content Matrix 8.9 by run migrations? Specifically, we want to hear that it uses 1.2 TLS. that will make our security team happy. If there is a config value that needs to be tweaked in Conent Matrix to use 1.2 explicitly, what is the setting and how to set it up, please?

  • over 3 years ago in reply to denis molodtsov

    Hello Dennis, 

    Content Matrix 8.9 and above supported for TLS 1.0, TLS 1.1, TLS 1.2, we no longer need the SecurityProtocol portion in the EnvironmentalSetting and it was removed.

    If SharePoint Online is using TLS 1.2, Content Matrix will use it as well.

    -Wes

  • over 3 years ago in reply to wes samson

    Hi Wes, thank you very much for your answer. We really appreciate your help!

    Can I clarify one thing, though, please? SharePoint Online supports TLS 1.0, TLS 1.1 and TLS 1.2. Considering all three are supported, which one does Content Matrix use by default? TLS 1.2?

  • over 3 years ago in reply to denis molodtsov

    It will use what the default that is set up the connection is using.  Since SPO using TLS 1.2 it will use TLS 1.2

    Hope this helps

    Wes

  • over 3 years ago in reply to wes samson

    it does definitely help! thank you very much, Wes!