This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 2%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Dear All,
we have exchange2013 CU23 in our environment. CAS and MBX roles are on separate physical servers.
At present we have hybrid environment with mailboxes on-premise and exchange online.
Exchange webservices stopped when we disabled SSL3.0 and enabled TLS 1.2 on exchange servers.
Request your assistance to fix this issue.
Regards,
Mohammed Nasim Shah
Hi All,
Is there any suggestion or tips?
Regards,
Nasim
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 63%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESZ%3C/text%3E%3C/svg%3E)
Hi,
Sorry for late response.
Your query is related to exchange dev, so I moved it to the relevant forum.
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 84%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGS%3C/text%3E%3C/svg%3E)
I would suggest going through https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-tls-guidance-part-2-enabling-tls-1-2-and/ba-p/607761 as a starter and making sure you have set the SystemDefaultTlsVersions correctly and have the correct CU's etc.
Thank you for response.
Exchange2013 has CU23. TLS1.2 was enabled and SSL disabled as per Microsoft article details. Is there any log which can help to trace whats happening?
What is the actual error that your getting? is OWA working OnPrem (OWA also uses EWS). You should be able to check the EWS log on the CAS server, you can enable https://www.microsoft.com/security/blog/2017/09/07/new-iis-functionality-to-help-identify-weak-tls-usage/ and then check you IIS logs to see if its an issue with proxying etc. Also your windows Eventlogs and try running Test-OutlookWebServices and checking the errros.