TLS Support for KIC 2.7, 2.8 - 2.10

Issue

What versions are supported for KIC 2.7, 2.8 - 2.10?

Solution

By default in Message Connector, only TLS 1.1 and TLS 1.2 are supported for MC . Low secure protocols like SSL2, SSL3, TLS1.0 are not supported.

TLS 1.3 is also not supported by KIC 2.7.

If you would like to *only* support TLS 1.2 you would need to update as highlighted below in create_config.xslt and rerun the configuration tool.  This file's default location is:

C:\Program Files (x86)\Kofax\KIC-ED\MC\xcd\Create_Config.xslt

<OpenSsl>
<ContextOptions> 385875968</ContextOptions> <!-- 0x17000000: Disable SSL2, SSL3, TLS1.0 and TLS 1.1 -->
<!-- <CipherList>HIGH"</CipherList> -->
</OpenSsl>

 

TLS 1.3 Support.

KIC 2.8 - 2.10 supports the ability to use TLS 1.3.
Kofax Import Connector Release Notes

Support for TLS 1.3 Support for TLS 1.3 is added in Message Connector Configuration to update the security standards. OpenSSL is also updated to support TLS 1.3. 

 

 

Level of Complexity 

Moderate

 

Applies to  

Product	Version	Build	Environment	Hardware
KIC	2.x

References

 

​