Is Workflow Manger 1.0 supports if disable TLS 1.0 & 1.1 and Enable only TLS 1.2 in Windows Server 2019 Server

Question

Hi,
I installed and configured the Workflow Manager farm for SharePoint 2016 , in one of the Application server .
as per our org policy in App server i disabled TLS 1.0 & 1.1 and enabled only TLS 1.2
After i enable TLS 1.2 below service not started and error in event viewers.

Service Bus Message Broker.

The Microsoft Service Fabric Host Service service terminated unexpectedly. It has done this 6 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.

I installed in App Server
Workflow Manger 1.0 Cumulative Update 5 Installed
Service Bus 1.1. with kb 3086798 Installed

Below are the steps i did after disable TLS 1.2
-I leave the WF farm
-when i join the existing farm
i get below error

Error] [1/13/2021 5:04:41 PM]: System.Management.Automation.CmdletInvocationException: The system cannot find the file specified ---> System.ComponentModel.Win32Exception: The system cannot find the file specified
at System.Diagnostics.Process.StartWithCreateProcess(ProcessStartInfo startInfo)

I check this link but i already installed updates for Workflow Manger 1.0 Cumulative Update 5 Installed
Service Bus 1.1. with kb 3086798 Installed
https://support.microsoft.com/en-us/help/4077554/add-support-for-tls-1-1-and-tls-1-2-on-service-bus-for-windows-server

Here How can i configure Workflow Manger 1.0 only TLS 1.2 enabled in Windows Server 2019 Server

Answer 1

Hi i uninstalled Service BUS and its updates and installed Windows Azure Pack: Service Bus 1.1 with TLS Support from Wpi tool then installed Service BUS 1.1 and updates after that Workflow manger farm creates
but unfortunately there is no installation guide articles mentioned this.

Answer 2

Hi @adil ,

To enable TLS protocol version 1.2 on Workflow Manager Windows Server Registery, try as following then compare the result:

1.Disable RC4 by changing the Enabled key value to 0 at below Register Paths:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128]  
“Enabled”=dword:00000000  

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]  
“Enabled”=dword:00000000  

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]  
“Enabled”=dword:00000000  

2.Open the Register Editor, navigate to the below path, and add a new DOWRS “SchUseStrongCrypto” with 1 value.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319  

3.Repeat the above steps for each workflow manager server, then restart your server to reflect your register changes.

More information for your reference:

https://thesharepointfarm.com/2016/04/tls-1-2-support-workflow-manager-office-online-server/#:~:text=There%20are%20two%20requirements%20to,Second%2C%20add%20the%20SchUseStrongCrypto%20value.

https://spgeeks.devoworx.com/service-bus-message-broker-stuck-on-starting/#:~:text=Service%20Bus%20is%20a%20messaging,Gateway%20Database.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.