How to enable TLS 1.1/1.2 for Windows 7/8 and Outlook

If your copy of Outlook on Windows 7 or 8 cannot connect to Kualo's mail servers, it is likely because TLS 1.1 and TLS 1.2 are not enabled by default on those older versions of Windows. The steps below walk you through enabling them.

Step 1 - install all Windows updates

1. Open Windows Update and install all important updates.
2. If you are on Windows 7, make sure Service Pack 1 is installed before continuing.
3. Reboot your PC if prompted.

Step 2 - install KB3140245

1. Search for KB3140245 in the Microsoft Update Catalog and download the update for your version of Windows.
2. Install it and reboot.

Step 3 - run the Microsoft Easy Fix

Microsoft provided an Easy Fix tool to enable TLS 1.1 and 1.2 as default protocols in WinHTTP. Search for "Microsoft KB3140245 Easy Fix" on the Microsoft Support site to find and run the tool, then reboot.

Step 4 - add the registry keys

If Outlook still cannot connect after the steps above, you can add the required registry keys manually.

1. Press Start, search for Run, type regedit, and press Enter.
2. Navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols

3. Under Protocols, create two new keys if they do not already exist:
   • TLS 1.1
   • TLS 1.2
4. Inside each of those keys, create a sub-key called Client.
5. Inside each Client key, create a new DWORD (32-bit) value named DisabledByDefault and set its value to 0.
6. Reboot your PC and open Outlook.

Troubleshooting

If Outlook still cannot send email or cannot connect on port 465, try changing the outgoing port to 587 in your account settings.