MID Server TLS 1.1

[TT3]

I got following notification form ServiceNow:

Beginning with the Now Platform^® Utah release planned for March 2023, ServiceNow MID Server offering will no longer support TLS 1.1 or below.  

TLS 1.2 and newer protocols will not be impacted, and no action is needed. However, if you utilize TLS 1.1 or below, please take a moment to review the below.  

How do we know which version of TLS is being used?

Thank you.

[RGreene]

I have put it on a couple of my Mid-Servers.  it does show the TLS version. 
I feel that it has limited value because it does not tell you the offending device. 
Also the roll out is painful since you have to modify each mid-server.

[mike555]

I turned it on.  To find the TLS version, run this command afterwards

cat /servicenow/<server name>/agent/logs/wrapper.log | grep "server version"

[Becky Goemans]

@doug.schulze  We added the solution proposed to one of our Midservers to see the results - while it gives us the detail it doesnt tell us what IP/Device has what TLS version any thoughts on how we could provide a list of devices/IP to our customers impacted by the EOS of TLS version 1.1 and below? 

[doug_schulze]

At a first glance, cmdb_ci_certificate has the version, if that's the right value and that record has a relationship to the device is on so I'd think it's a CMDB query to tie the two together to report to what you are looking for...