# How to enable TLS 1.1/1.2 for Windows 7/8 and Outlook

> Enable TLS 1.1 and 1.2 on Windows 7 or 8 so Outlook can connect securely to Kualo mail servers.

Source: https://www.kualo.com/knowledgebase/email-other-devices/how-to-enable-tls-v11v12-for-windows-78-and-outlook-2007201020132016
Updated: 2026-06-04

---

If your copy of Outlook on Windows 7 or 8 cannot connect to Kualo's mail servers, it is likely because TLS 1.1 and TLS 1.2 are not enabled by default on those older versions of Windows. The steps below walk you through enabling them.

:::warning
Outlook 2007 is no longer supported by Microsoft and is around 15 years old. These steps have not been tested with that version. We strongly recommend upgrading to a current version of Outlook before proceeding.
:::

## Step 1 - install all Windows updates

1. Open **Windows Update** and install all important updates.
2. If you are on Windows 7, make sure **Service Pack 1** is installed before continuing.
3. Reboot your PC if prompted.

## Step 2 - install KB3140245

1. Search for **KB3140245** in the Microsoft Update Catalog and download the update for your version of Windows.
2. Install it and reboot.

## Step 3 - run the Microsoft Easy Fix

Microsoft provided an Easy Fix tool to enable TLS 1.1 and 1.2 as default protocols in WinHTTP. Search for "Microsoft KB3140245 Easy Fix" on the Microsoft Support site to find and run the tool, then reboot.

## Step 4 - add the registry keys

If Outlook still cannot connect after the steps above, you can add the required registry keys manually.

:::warning
Editing the Windows registry incorrectly can cause serious problems. If you are not confident doing this, open a support ticket and we will send you a ready-made `.reg` file that adds the keys automatically.
:::

1. Press **Start**, search for **Run**, type `regedit`, and press **Enter**.
2. Navigate to the following key:

```
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols
```

3. Under **Protocols**, create two new keys if they do not already exist:
   - `TLS 1.1`
   - `TLS 1.2`
4. Inside each of those keys, create a sub-key called `Client`.
5. Inside each `Client` key, create a new **DWORD (32-bit)** value named `DisabledByDefault` and set its value to `0`.
6. Reboot your PC and open Outlook.

## Troubleshooting

If Outlook still cannot send email or cannot connect on port 465, try changing the outgoing port to **587** in your account settings.

---

_Source: Kualo Knowledgebase — https://www.kualo.com/knowledgebase/email-other-devices/how-to-enable-tls-v11v12-for-windows-78-and-outlook-2007201020132016 · © Kualo Ltd._