BPC link not opens -TLS 1.2 is checked in internet explorer as security policy upgraded.

[Former Member]

BPC link not opens -TLS 1.2 is checked in internet explorer
Hi SAP Experts , We has changed some security policy in our network at os level which has changed the settings in Internet explorer for end users. Which is not allowing the BPC link to open . Please find below snapshot. Which shows the internet explorer settings has updated after security policy updated at our network and the link has not opened ( please see Use TLS 1.2 is checked ). Now we wants us to resolve this issue however our network team they don’t want to change that policy but to retain its settings Use TLS 1.2 to checked and at the same time there should be bpc links working for internet explorer 8. please suggest  a solution as all 500 users aapprox are waiting. Please revert back to me if you have any issues
Steps for Reconstruction
TLS 1.2 IS ENABLED IN INTERNET EXPLORER DUE TO SECURITY UPGRADE POLICY HENCE BPC LINK NOT OPENS FOR END USERS

[Sriram2009]

Hi Shafeeq

I am not sure, You can define the IE Secure setting through Microsoft AD group policy, You can contact your AD admin. Check this Microsoft link TLS/SSL Settings

Regards

SS

[Former Member]

Hi Ram,

what i have heard is that we need to set some parameters of ciphers  in our BW System which will remove TLS 1.2      for that BW Systems and users can able to  login .

but iam not sure which cipher parameters need to maintain for TLS 1.2 .

If anybody has some idea on this , please advise how to proceed .

Regards

Shafeeq

[Former Member]

Hi Experts ,

Any ideas on the above TLS 1.2 Checked in IE8 BPC link not opens.

Appreciate responses on the above . Many Thanks in Advance.

Regards

Shafeeq

[guilherme_deoliveira]

Hello Shafeeq,

In order to your backend (BW system) be able to communicate through TLS1.2, you'll have to fulfill some pre-requisites:

1. Ensure that you have Commoncryptolib PL31 or higher;

2. Ensure that your ssl/ciphersuites parameters are configured accordingly to accept such protocol (i.e. ssl/ciphersuites = 135:HIGH:MEDIUM:+e3DES).

You can find all these details (and even more) in SAP Note 510007 (points 6, 7 and 8).

I hope this helps.

Best Regards,
Guilherme de Oliveira
SAP Active Global Support

[Former Member]

Hi Guilherme ,

Thanks for replyiing .

i have some queries where should i maintain  ssl/ciphersuites = 135:HIGH:MEDIUM:+e3DES  parameter in Default Profile or Instance Profile.

apart from the above paramter is there anything else do we have to maintain.

i have checked the above note but its not clear.

Regards

Shafeeq