How to enable both TLS1.2 and TLS1.3 in Windchill with Windchill Authentication

[hno]

hello.

When applying Windchill Authentication in Thingworx Navigate,
Windchill's TLS version needs to be set to 1.2 for the Odata Connector and Swagger Connector to function.

However, Windchill interfaces with other systems where only allowing TLS1.2 is not feasible. Is there a way to allow both TLS1.2 and TLS1.3 in Apache HTTP Server and ensure Thingworx Navigate's connectors also work?

I tried the following configuration, but it resulted in a handshake error on the Apache server.

SSLProtocol -all +TLSv1.2 +TLSv1.3
SSLProxyProtocol -all +TLSv1.2 +TLSv1.3

[VladimirN · Accepted solution]

Take a look:

• "Expert Session - Navigate - SSL & Windchill Authentication": https://www.youtube.com/watch?v=-GoqyycHie8 
• "TLS 1.2 and TLS 1.3 Support for Windchill": https://support.ptc.com/help/windchill/r12.1.2.0/de/index.html#page/Windchill_Help_Center/WCAdvDeployGuide/WCAdvDepAuth_WCAuthStrategy_TLSConfiguration.html 

[hno]

Thank you for your reply.

The guide in the link instructs to configure Windchill with TLS 1.2. In my Windchill environment,

setting it to TLS 1.2 works fine.

However, since Windchill connects to other systems using TLS 1.3, I cannot set it to TLS 1.2 only.

[vnamboodheri]

Hello @hno, 

It looks like you have a response from a community member. If it helped you solve your question please mark the reply as the Accepted Solution. Or if you found a solution, please document it in this topic and mark it as accepted solution.

Of course, if you have more to share on your issue, please let the Community know so other community members can continue to help you.

Thanks,
Community Moderation Team.