We had a PCI scan and it wants us to disable TLS 1.0 on our server 2008 R2 server running Exchange 2010 (14.03.0248.002). I used IIS Crypto 1.6 build 7 to disable it. SSLLabs gives us an A now, but autodiscover stoped working correctly. I used the "Test E-mail AutoConfiguration" tool and it says...
Auoconfiguration was unable to determine your setting!
in the log tab...
Attempting URL xttps://mail.example.com/autodiscover/autodiscover.xml found through SCP Autodiscover to xttps://mail.example.com/autodiscover/autodiscover.xml stating GetLastError=12030; xttpStatus=0. Autodiscover to xttps://mail.example.com/autodiscover/autodiscover.xml Failed (0x800C8203)
12030 The connection with the server has been reset or terminated, or an incompatible SSL protocol was encountered. For example, WinHTTP version 5.1 does not support SSL2 unless the client specifically enables it.
I did some google searched and did find much. Any Ideas how to do this?