Guide to check and enable TLS 1.2 and 1.3 in your Web Browser

Quick guide on how to check and enable TLS 1.2 and 1.3 on different web browsers.Steps are included.

Transport Layer Security (TLS) 1.0 and 1.1 have been unsupported for some time and were disabled in Windows 11 Insider Preview builds starting in September 2023, as well as in future Windows OS releases. However, if you’re using an older version of Windows, you can manually disable these protocols. 

TuringSign’s DV, OV, and EV TLS/SSL Certificates automatically come with TLS 1.2 and 1.3, it is worth taking a look at the product comparison with their specs before checking this guide. Ensuring that your web browser has TLS 1.2 and 1.3 activated is crucial for maintaining secure internet communications.

Here are the ways you can verify and enable these protocols across different browsers:

Google Chrome

1. Access Settings:

    • Open Chrome.
    • Click on the three-dot menu in the upper-right corner (Alt + F) and select Settings.

2.  System Settings:

    • Under the System section, click on Open your computer’s proxy settings.
 

3.  Internet Properties:

    • This will open the “Proxy” settings page on your Windows. 
    • Go back/ Click the “Network & internet” tab on the left side 
    • Navigate to the “Advanced network settings” at the bottom

 

4. Enable TLS:

    • In the Advanced network settings list, scroll down and click the “Internet options
    • Click the “Advanced” tab on the far right, scroll down, and ensure that Use TLS 1.2 and Use TLS 1.3 are checked.
    • Click Apply, then OK.

 

 5. Restart Chrome:

    • Close and reopen Chrome to apply the changes.

Mozilla Firefox

1.  Access Configuration:

    • Open Firefox.
    • In the address bar, type about:config and press Enter.
    • A warning page may appear. Click Accept the Risk and Continue.

2. Modify TLS Settings:

    • In the search bar, type tls.
    • Locate security.tls.version.min and security.tls.version.max.
    • Double-click security.tls.version.min and set its value to 3 to enable TLS 1.2.
    • Double-click security.tls.version.max and set its value to 4 to enable TLS 1.3

3. Apply Changes:

    • Click the checkmark to save the changes.
    • Restart Firefox to apply the new settings.



Apple Safari


For Safari users on macOS:

  • TLS Support:
    • Safari relies on the system’s SSL/TLS settings.
    • Ensure your macOS is up to date to support the latest TLS versions.
  • System Update:
    • Click on the Apple menu and select System Preferences.
    • Choose Software Update and install any available updates.

Verifying TLS Version on a Website

To check which TLS version a website is using:

  1. Open the website you want to check (ex. www.google.com) 

  2. Click Develop and “Show Web Inspector” or press Option + Command + I

3. Select the website you want to check in the list 

4. Navigate to the Network Tab and select the Website Request

5. Click the Headers tab and look for the Security section to see TLS details 

Microsoft Edge

  1. Access Settings:
    • Open Edge.
    • Click on the three-dot menu in the upper-right corner and select Settings.

  2. System Settings:
    • Scroll down and click on “System and Performance”.
    • Click on “Open your computer’s proxy settings“.

3. Internet Properties:

    • This will open the “Proxy” setting page on your windows. 
    • Go back/ Click the “Network & internet” tab on the left side 
    • Navigate to the “Advanced network settings” at the bottom

4. Enable TLS:

    • In the Advanced network settings list, scroll down and click the “Internet options
    • Click the “Advanced” tab on the far right, scroll down, and ensure that Use TLS 1.2 and Use TLS 1.3 are checked.
    • Click Apply, then OK.

5. Restart Edge:

    • Close and reopen Edge to apply the changes.


By following these steps, you can ensure that your browser is configured to use the latest and most secure TLS protocols, enhancing your online security.


TS Website banner_purchase ssl CTA

0
    0
    Your Cart
    Your cart is empty

    Trustworthy AI for Better SSL

    TuringSign is actively innovating in cutting-edge AI technology to make traditional SSL workflows quicker, more efficient, more accurate and less costly.

    We apply automation to routine tasks including technical support and high assurance organization validation. This not only saves time but also minimizes errors and ensures faster, more reliable support for TuringSign users. With AI handling routine queries and tasks, your team can focus on more complex issues.

    Automation for Unmatched Speed

    Check mark with hand icon.

    Full Automation

    Fully Automate your SSL Management with ACME

    Analysis analytics column graphic improvement icon.

    Fastest OCSP

    Boost Page Loading Speeds with our Industry-Leading OCSP

    Achievement icon.

    Priority Validation

    Get High-Assurance Certificates Faster than ever

    Best Value Pricing

    Lowest Prices for Best-in-Class Products : Affordability with excellence.

    Standard DV SSL

    DigiCert $64
    Sectigo $99
    GlobalSign $249
    GoDaddy $69
    TuringSign $59

    Wildcard DV SSL

    DigiCert $629
    Sectigo $499
    GlobalSign $849
    GoDaddy $349
    TuringSign $259

    Single OV SSL

    DigiCert $312
    Sectigo $199
    GlobalSign $349
    Entrust $199
    TuringSign $179

    Wildcard OV SSL

    DigiCert $984
    Sectigo $879
    GlobalSign $949
    Entrust $799
    TuringSign $699

    EV SSL

    DigiCert $468
    Sectigo $279
    GlobalSign $599
    GoDaddy $399
    TuringSign $209

    Source: Netcraft SSL Server Survey, August 2024. Provided for reference only. 3rd Party prices may have change.

    Join the Waitlist

    Next Steps

    1. Validate Domain (Authenticate domain depending on which method you choose)

    Check the email that has been sent to you. To confirm the domain ownership rights for your certificate, you need to copy the validation code from the approval email, follow the link in it and paste the validation code into the corresponding field.

    From the email, please click the link to the verification page, Once in the verification page, please enter the code provided in the email for verification.

    That’s it!

    After you have completed verification, a confirmation email will be sent to you. And shortly after, an issue confirmation will be sent to you via email. You can follow the link to the portal to download your newly issued certificate.

    If you have followed the steps above and did not receive an approval email to your mailbox, please click the link to the portal and double check your validation method or contact us for help. 

    Another way of verifying a domain is DNS (TXT record) Verification. If you selected DNS Authentication as your verification method, you will receive a unique TXT record via email consisting of two parts:

    • 1. Name: Name/Host/Alias/TXT: Blank or @
    • 2. Value/Points to/Destination:”wisekey=XXXXXXX”
    • TTL: This is your TTL (Time-To-Live) value. Set it to 3600 or lower.

    Verify by adding a TXT record in your DNS. Please verify and check if you have added the correct record

    Please submit a requestfor support if you face any issues.

    Depending on your DNS provider, You may have to wait for at least an hour for the changes to take effect in the DNS Servers. You will be notified via email when the domain is verified.

    The third method of verifying a domain is HTTP File Upload Verification. After choosing File Authentication as your verification method, you will receive an email and be asked to download a unique verification file (Format: .txt) and upload it to a specific directory on your web server.



    Verify by uploading the attached file fileauth.txt in your web server as follows:



    • 1. Download the text file fileauth.txt (attached with the email).
    • 2. Upload the above file (fileauth.txt) to your host in this EXACT path: http://my-domain.com/.well-known/pki-validation/fileauth.txt


    You may have to wait for at least an hour for the changes to take effect in the validation services. You will be notified via email when the domain is verified.

    Please submit a request for support if you face any issues.

    2. Receive Confirmation (After validation an email will be sent with a link to certificate)

    3. Download certificate and upload to hosting

    Notice: After generating a CSR,
    1. Copy the Private KEY and keep this to yourself for reference.
    2. Copy only the CSR above and use(paste)
    in to request your TS Certificate.
    3. Click the top left button to close.

    TuringSign
    Privacy Overview

    This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.