# Updating to TLS 1.2 with SMTP method through Office365

**URL:** <https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719>\
**Category:** Developing with Concrete\
**Created:** [August 5, 2022, 2:44pm UTC](https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719 "2022-08-05T14:44:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![WebOnTheWebb](https://forums.concretecms.org/user_avatar/forums.concretecms.org/webonthewebb/32/4094_2.png) [@WebOnTheWebb](https://forums.concretecms.org/u/WebOnTheWebb)\
**Post date:** [August 5, 2022, 2:44pm UTC](https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719/1 "2022-08-05T14:44:03Z")

</div>

I’m getting this message in the log from the form block email function using SMTP to Office365… it’s to do with Microsoft not supporting TLS 1.0 and 1.1 any more, but it seems to have broken the method:

The following error was found while trying to send the test email:  
4.7.66 TLS 1.0 and 1.1 are not supported. Please upgrade/update your client to support TLS 1.2. Visit [New opt-in endpoint available for SMTP AUTH clients still needing legacy TLS - Microsoft Tech Community](https://aka.ms/smtp_auth_tls). [[LO2P123CA0105.GBRP123.PROD.OUTLOOK.COM](http://LO2P123CA0105.GBRP123.PROD.OUTLOOK.COM)]

Anyone know how best to fix this? I’m using v8.4.1.  
thanks

---

<div class="post-metadata">

**Author:** ![dbuonomo](https://forums.concretecms.org/user_avatar/forums.concretecms.org/dbuonomo/32/3575_2.png) [@dbuonomo](https://forums.concretecms.org/u/dbuonomo)\
**Post date:** [August 5, 2022, 3:23pm UTC](https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719/2 "2022-08-05T15:23:18Z")

</div>

In general, you need to disable older TLS protocols as they are considered insecure and not supported by most clients today. If you are not on a shared hosting service and have privileges, remove TLS 1.0 and 1.1 completely, then enable TLS v2 and v3.

For our Apache configs, we have this:  
SSLProtocol all -SSLv2 -SSLv3

More info can be found here:

Disable old TLS versions (1.0/1.1 ) for Apache/Nginx on Ubuntu 18.04 or CentOS 7

> **[Disable old TLS versions (1.0/1.1 ) for Apache/Nginx on Ubuntu 18.04 or CentOS...](https://www.digitalocean.com/community/questions/disable-old-tls-versions-1-0-1-1-for-apache-nginx-on-ubuntu-18-04-or-centos-7)**
>
> I recently got asked how we can disable old TLS versions on a server. The user was applying for a PCI compliance and wanted to have only TLS 1.2 running on t…

Note: there is (was) a typo with regard to the section on Ubuntu - second section says CentOS but should be Ubuntu.

---

<div class="post-metadata">

**Author:** ![WebOnTheWebb](https://forums.concretecms.org/user_avatar/forums.concretecms.org/webonthewebb/32/4094_2.png) [@WebOnTheWebb](https://forums.concretecms.org/u/WebOnTheWebb)\
**Post date:** [August 5, 2022, 3:55pm UTC](https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719/3 "2022-08-05T15:55:48Z")

</div>

Hi… I’m afraid it’s a shared server so I’m unable to disable older versions, but it’s supposed to be enabled for up to 1.3. Is there way to script Concrete to use 1.2? I’m bit frontend so this isn’t my area of expertise…

---

<div class="post-metadata">

**Author:** ![dbuonomo](https://forums.concretecms.org/user_avatar/forums.concretecms.org/dbuonomo/32/3575_2.png) [@dbuonomo](https://forums.concretecms.org/u/dbuonomo)\
**Post date:** [August 5, 2022, 8:29pm UTC](https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719/4 "2022-08-05T20:29:00Z")

</div>

That’s a good question. I don’t know if you can force which TLS version to use. The ohter alternative is to ask your host if they can migrate you to a server that does not have TLS 1.0/1.1 installed. Of course, that may come with an IP address change as well.

---

<div class="post-metadata">

**Author:** ![WebOnTheWebb](https://forums.concretecms.org/user_avatar/forums.concretecms.org/webonthewebb/32/4094_2.png) [@WebOnTheWebb](https://forums.concretecms.org/u/WebOnTheWebb)\
**Post date:** [August 8, 2022, 10:21am UTC](https://forums.concretecms.org/t/updating-to-tls-1-2-with-smtp-method-through-office365/3719/5 "2022-08-08T10:21:54Z")

</div>

Okay, thanks for the input J
