We have a system that needs to provide both database and web services. We want to lock down the TLS security settings to the highest degree possible. It's running MS SQL 2008 on Windows Server 2008 R2.
I know that SQL Server 2008 does not support any protocol higher than TLS 1.0. However, I would still like the web service to reject incoming TLS 1.0 negotiation attempts. Best I can tell though, both seem to be controlled through the same SCHANNEL registry keys.
Is there any way to separately control TLS negotiation for MSSQL and IIS, on the same system, such that MSSQL is allowed to use TLS 1.0 but IIS is forced to only TLS 1.1/1.2?