Skip to main content

Email notifications not working due to using TLS 1.0

Thread solved

I'm evaluating Acronis True Image 2019 as a replacement for my existing backup/recovery solution (ShadowProtect). Backups are running smoothly (although I haven't done a test recovery yet). And, I'm pretty pleased with the ease of setting up backup jobs compared with ShadowProtect.

Unfortunately, I've run into an issue with email notifications not working. My mail provider (pair.com) has disabled TLS 1.0. When I try to send a test email notification, in Wireshark I see ATI try to start a TLS v1 connection, at which point the mail server closes the connection. So, I don't think there's any question that it's the use of TLS 1.0 that's the root cause of the issue.

Is there any way to force ATI to use TLS 1.2? I didn't see any settings accessible from the user interface, but perhaps there's a configuration setting somewhere?

I also see there's a 2020 beta going on. As I've not purchased the product yet, I don't have access to the beta code. Does anyone know if ATI 2020 uses TLS 1.2 by default?

Thanks for your help!

Edit: I'm on a Windows 10 platform.

Edit 2: I also should mention that I opened a support ticket few days ago. I haven't received a response yet, which I suspect is because I haven't purchased any product yet.

 

0 Users found this helpful

Rather than setting up notifications for individual backup task, you could try the global settings for email notifications which can be found in settings part of the App. You can select he type of events you want reported.

Ian

Thanks for the suggestion to use the global settings. I had looked at that, but thought it applied only to backups to the cloud (I'm backing up to local storage). I've enabled all events types, so we'll see what happens on the next backup.

 

Mark, you are entitled to 30-days of free support from Acronis during your trial product period plus, as far as I understand the ATI 2020 Beta program is open to any user who registers for it, not just for existing product owners!

See the ATI 2020 Beta webpage

Mark, please submit Feedback from the ATI 2020 GUI for this issue and also post a topic in the ATI 2020 User Interface & Usability Forum about the same issue to see if any other users are concerned about the same.

There has been long term concerns over the age of protocols used by the Email Notifications process in ATI - SSL cannot be used with 99% of providers because is deemed insecure, and it very much sounds as if the same could easily apply to TLS too, which will leave users with no way to generate notifications if providers start rejecting TLS 1.0

Note: when creating a new topic in the forums, do not embed / attach any images or files in the initial forum topic post else this will be put in the Off Topic forum for some strange reason.  Post your new topic without any attachments / images then edit it to add such items after it is in the desired forum!  (The forum moderator knows of this issue!)

Ok. I sent feedback from the UI, as well as made a post in the beta forum. Thanks for that suggestion.

 

Ian, I just wanted to confirm that your suggestion to use the global (cloud) settings worked.

 

Mark that is expected as the email is generated by Acronis not the user.

Mark Hilbush wrote:

Ok. I sent feedback from the UI, as well as made a post in the beta forum. Thanks for that suggestion.

True Image 2020 is still using old & busted TLS 1.0.  Did you get any response to your beta-forum post?

Jason Popovic wrote:
 

True Image 2020 is still using old & busted TLS 1.0.  Did you get any response to your beta-forum post?

No response. 

Mark Hilbush wrote:

Jason Popovic wrote:

True Image 2020 is still using old & busted TLS 1.0.  Did you get any response to your beta-forum post?

No response. 

Encountered the same error (Acronis Support Professional told me that eMails can't be delivered because IP-address instead of Hostname is used) and asked to escalate this to Security Department (as TLS 1.0 is deprecated)

BTW: did you notice that the Hyperlinks (Open Online Dashboard or Change eMail notification settings) allow access to Acronis Cloud (w/o authentication) which means everybody who gets the URL has full access to backuped files/can restore it? If you didn't turn on password based-encryption yet, now it's time for it 

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 250
Comments: 7092

Armin wrote:
BTW: did you notice that the Hyperlinks (Open Online Dashboard or Change eMail notification settings) allow access to Acronis Cloud (w/o authentication) which means everybody who gets the URL has full access to backuped files/can restore it? If you didn't turn on password based-encryption yet, now it's time for it 

Hi! We plan to change this behavior in the next product version.

Ekaterina wrote:
Armin wrote:
BTW: did you notice that the Hyperlinks (Open Online Dashboard or Change eMail notification settings) allow access to Acronis Cloud (w/o authentication) which means everybody who gets the URL has full access to backuped files/can restore it? If you didn't turn on password based-encryption yet, now it's time for it 

Hi! We plan to change this behavior in the next product version.

You didn't change it! What is Acronis driving currently?

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 250
Comments: 7092

Hello Armin,

we've added the password-protection to the shared links

Ekaterina wrote:

Hello Armin,

we've added the password-protection to the shared links

Thanks but this refers to specific files in the Backup (which was discussed already here), the problem with 1 Click-URL persists (at least you support TLS >1.0 now)

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 250
Comments: 7092

Hello Armin,

I've discussed this topic with the RnD - according to my colleagues, we might move away from the auto-login in the future, when the whole platform will be reworked. Currently, a user is requested to provide credentials when signing in to the product anyway.

This thread somehow went off course from TLS 1.0 to driving a car into the wall regarding password protection?????

So, when is Acronis going to fix the TLS 1.0 issue. Even Microsoft is phasing this out of Microsoft 365?