January, 2019
Esri have recently announced upcoming improvements to ArcGIS Online in order to maintain the highest industry standards for data integrity and network security. Starting on 16 April 2019, ArcGIS Online will only accept TLS 1.2 connections for ArcGIS Online services. Some software, like ArcGIS Pro, are already TLS 1.2 enabled. Other Esri software, such as ArcGIS Desktop, uses TLS 1.0—this software requires a patch or configuration change to support TLS 1.2 connections. Esri is releasing patches and instructions to update existing software to support these connections.
What is TLS?
TLS or “Transport Layer Security” is a widely deployed network security protocol. It provides privacy and data integrity between communicating applications over a network. You use TLS whenever accessing ArcGIS Online services, such as basemaps, geoprocessing services, and the Living Atlas, from ArcGIS Desktop, ArcGIS Enterprise, and other applications.
Who is affected?
Users of most ArcGIS software or custom solutions using Esri technology may be affected by this planned update to TLS protocol v1.2.
What do I need to do to prepare for this change?
Go to the Esri TLS Support page for more information and specific actions you may need to take in advance of this update; or book a consultation with a Technical Support Specialist who can guide you through the update and the appropriate patches for your environment.
Release schedule for ArcGIS Desktop Patches
| Product and Version | Patch available for download |
| ArcGIS Desktop 10.6.1 | ArcGIS-1061-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.6 | ArcGIS-106-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.5.1 | ArcGIS-1051-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.5 | ArcGIS-105-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.4.1 | ArcGIS-1041-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.4 | ArcGIS-104-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.3.1 | ArcGIS-1031-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.3 | ArcGIS-103-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.2.2 | ArcGIS-1022-DT-TLS-Patch.msp |
| ArcGIS Desktop 10.2.1 | ArcGIS-1021-DT-TLS-Patch.msp |
How to test or validate the TLS 1.2 Connection to ArcGIS Online?
After you have updated your software or operating system to support TLS 1.2 connections, you can verify the changes by testing the connections to sample ArcGIS Online services.
Test TLS 1.2 Connections to ArcGIS Online
Further references?
- Esri Software Products Affected by TLS 1.2 Implementation
- Transport Layer Security – Wikipedia
- TLS Guidance document
- How To: Test ArcGIS TLS 1.2 connections to ArcGIS Online
- How To: Validate TLS 1.2 connections for ArcGIS Desktop
- FAQ: What do I need to know about TLS 1.2 and the ArcGIS Platform?
- FAQ: How do I enable TLS 1.2 on ArcGIS Desktop?
- FAQ: How do I enable TLS 1.2 on ArcGIS Pro?
- FAQ: How is the ArcGIS Enterprise and its associated software components, ArcGIS Server and Portal for ArcGIS, affected by disabling TLS 1.0 and 1.1?
- FAQ: What are the implications for ArcObjects SDK for the Microsoft .NET Framework and ArcGIS Engine .NET client applications when enforcing TLS 1.2-only connections?
- GeoNET Blog: ArcGIS Online TLS Changes: Alternative Testing Methods
- GeoNET Blog: ArcGIS Online TLS Changes: Alternative Testing Methods – Mobile Edition
- Bug: ArcMap crashes after applying the TLS 1.2 patch
If you have any questions or concerns, please contact your local Esri Distributor Support team (for Esri Australia clients, use My Esri, support@esriaustralia.com.au or 1800 447 111); or book a consultation).
Last updated: 28 March, 2019
Esri Australia Technical Blog 