Deprecation of Pre-TLS 1.2 Support

Why Are We Deprecating Pre-TLS 1.2 Support?

To maintain strong operational security, Macrium is requiring a minimum of TLS 1.2 for connections to our critical services, including the servers responsible for Macrium Reflect installation, update notifications and license activation.

Older TLS protocols no longer meet modern security standards and are being retired across the industry. Requiring TLS 1.2 helps ensure that systems connecting to Macrium services are communicating securely with legitimate Macrium infrastructure.

This helps protect customers by ensuring that:

• Systems are authenticating with genuine Macrium servers
• Installation and update notifications are delivered securely
• Communication with Macrium services is encrypted using modern security standards

What Does This Mean?

Platforms that do not support TLS 1.2 or later will no longer be able to connect to certain Macrium online services.

This primarily affects:

• Online license activation
• License verification for subscription licensing
• Installation and update notifications

If a system attempts to connect using TLS 1.0 or TLS 1.1, the connection will fail.

For most customers this change will have minimal impact, as modern operating systems already support TLS 1.2.

Where possible, we recommend updating or patching the operating system to enable TLS 1.2 support. For environments where TLS 1.2 cannot be enabled, offline activation workflows remain available.

The tables below outline the recommended next steps for each Macrium solution depending on the operating system and installation type.

- Macrium Reflect Standalone

- Macrium Reflect X, Technician's License, and Deployment Kit New Installs

- Macrium Reflect X, Technician's License, and Deployment Kit Existing Installs

- Macrium Reflect LTSC New Installs

- Macrium Reflect LTSC Existing Installs

- Macrium SiteBackup

- Macrium SiteBackup (SiteBackup Seat Licensing)

- Macrium SiteBackup (SiteBackup Seat Licensing)

Macrium Reflect Standalone

Macrium Reflect X, Technician's License, and Deployment Kit - New Installs

When Macrium Reflect X, the Technician's License, and Deployment Kit are installed, a license check is performed against our licensing infrastructure. To secure the communications during this license check, a minimum of TLS 1.2 will be used.

Platforms that support TLS 1.2 by default, will not require any action before installing Macrium Reflect X, the Technician's License, and Deployment Kit.

Platforms that do not support TLS 1.2 by default and cannot be patched to support TLS 1.2 will be unable to perform these license checks, as a result we recommend performing an offline activation for new Macrium Reflect X installs as described here.

The Technician's License and Deployment Kit do not support offline activation and are no longer supported on these platforms.

Macrium Reflect X, Technician's License, and Deployment Kit - Existing Installs

When Macrium Reflect X, the Technician's License, and Deployment Kit have been "online activated", subsequent periodic license checks are performed against our licensing infrastructure. To secure the communications during this license check, a minimum of TLS 1.2 will be used.

Platforms that support TLS 1.2 by default, will not require any action as these period license checks will be performed successfully.

Platforms that do not support TLS 1.2 by default and cannot be patched to support TLS 1.2 will be unable to perform these license checks, as a result we recommend offline activating the existing license, resulting in these license checks not being performed.

The Technician's License and Deployment Kit performs these same license checks, with an additional license check when technician's rescue media is created. The Technician's License and Deployment Kit do not support offline activation and are no longer supported on these platforms.

Macrium Reflect LTSC - New Installs

When Macrium Reflect LTSC is installed, a license check is performed against our licensing infrastructure. To secure the communications during this license check, a minimum of TLS 1.2 will be used.

Platforms that support TLS 1.2 by default, will not require any action before installing Macrium Reflect LTSC.

Platforms that do not support TLS 1.2 by default and cannot be patched to support TLS 1.2 will be unable to perform these license checks, as a result we recommend performing an offline activation for new Macrium Reflect LTSC installs as described here.

Macrium Reflect LTSC - Existing Installs

Macrium Reflect LTSC does not perform the same period license check against our licensing infrastructure as Macrium Reflect X. This means that existing installations of Macrium Reflect LTSC will be unaffected by this change.

Macrium SiteBackup

Macrium SiteBackup (SiteBackup Seat Licensing)

For the majority of users, the SiteBackup server is responsible for managing the licensing for connected SiteBackup Agents using SiteBackup Seat licensing. In this case, no action is required on the SiteBackup Agent computer. The table below shows the steps required depending on the platform where the SiteBackup server is installed:

Macrium SiteBackup (Standalone Licensing)

In some scenarios, SiteBackup can also be used alongside standalone licensing.

In this use case, Macrium Reflect X is installed on a computer, then the SiteBackup Agent is installed alongside the standalone installation of Macrium Reflect X. The end result is that the computer can be managed through the SiteBackup central console, but is still responsible for its own licensing. In this scenario, steps may need to be taken, depending on the platform that is being used.