topic Re: How to enable both TLS1.2 and TLS1.3 in Windchill with Windchill Authentication in Windchill Navigate

How to enable both TLS1.2 and TLS1.3 in Windchill with Windchill Authentication

hno — Fri, 10 May 2024 01:54:57 GMT

hello.

When applying Windchill Authentication in Thingworx Navigate,
Windchill's TLS version needs to be set to 1.2 for the Odata Connector and Swagger Connector to function.

However, Windchill interfaces with other systems where only allowing TLS1.2 is not feasible. Is there a way to allow both TLS1.2 and TLS1.3 in Apache HTTP Server and ensure Thingworx Navigate's connectors also work?

I tried the following configuration, but it resulted in a handshake error on the Apache server.

SSLProtocol -all +TLSv1.2 +TLSv1.3
SSLProxyProtocol -all +TLSv1.2 +TLSv1.3

Re: How to enable both TLS1.2 and TLS1.3 in Windchill with Windchill Authentication

VladimirN — Fri, 10 May 2024 14:12:36 GMT

Take a look:

"Expert Session - Navigate - SSL & Windchill Authentication": https://www.youtube.com/watch?v=-GoqyycHie8
"TLS 1.2 and TLS 1.3 Support for Windchill": https://support.ptc.com/help/windchill/r12.1.2.0/de/index.html#page/Windchill_Help_Center/WCAdvDeployGuide/WCAdvDepAuth_WCAuthStrategy_TLSConfiguration.html

Re: How to enable both TLS1.2 and TLS1.3 in Windchill with Windchill Authentication

hno — Mon, 13 May 2024 06:54:27 GMT

Thank you for your reply.

The guide in the link instructs to configure Windchill with TLS 1.2. In my Windchill environment,

setting it to TLS 1.2 works fine.

However, since Windchill connects to other systems using TLS 1.3, I cannot set it to TLS 1.2 only.

Re: How to enable both TLS1.2 and TLS1.3 in Windchill with Windchill Authentication

vnamboodheri — Thu, 16 May 2024 10:15:42 GMT

Hello @hno,

It looks like you have a response from a community member. If it helped you solve your question please mark the reply as the Accepted Solution. Or if you found a solution, please document it in this topic and mark it as accepted solution.

Of course, if you have more to share on your issue, please let the Community know so other community members can continue to help you.

Thanks,
Community Moderation Team.