title: WCF Client hosted in IIS 7.5 App does not use TLS 1.2 on connect
body: <p><strong>Problem:</strong></p>
  
  <p>I have a generated WCF client which consumes a third party WebService. This client is part of a WeAPI Controler hosted in IIS 7.5. The third party Service requires TLS 1.2 for connections.</p>
  
  <p>When the WCF client tries to connect to the third party WebService I can see in Fiddler that the handshake fails and that the client request indicates that it is using TLS 1.0 instead of 1.2 (see Fiddler output below).</p>
  
  <p>I already tried KB245030 and activated TLS 1.2 for SChannel both client and server but with no avail (Also using the NARTAC Tool)<br/>
  <a href="http://support2.microsoft.com/kb/245030" rel="nofollow">http://support2.microsoft.com/kb/245030</a></p>
  
  <p>If I use Fiddler and modify the Fiddler Script to always use TLS 1.2 the Service call works fine.</p>
  
  <p><strong>Question:</strong></p>
  
  <p>Is it possible to configure the system so that the WCF client call uses TLS 1.2 when hosted in IIS 7.5?</p>
  
  <p><strong>Fiddler capture:</strong><br/></p>
  
  <pre><code>A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
  
  Version: 3.1 (TLS/1.0)&lt;br/&gt;
  Random: ...&lt;br/&gt;
  SessionID: empty
  
  Extensions:&lt;br/&gt;
      renegotiation_info  00&lt;br/&gt;
      server_name ...&lt;br/&gt;
      elliptic_curves secp256r1 [0x17], secp384r1 [0x18]&lt;br/&gt;
      ec_point_formats    uncompressed [0x0]
  
  Ciphers:&lt;br/&gt;
      [002F]  TLS_RSA_AES_128_SHA&lt;br/&gt;
      [0035]  TLS_RSA_AES_256_SHA&lt;br/&gt;
      [0005]  SSL_RSA_WITH_RC4_128_SHA&lt;br/&gt;
      [000A]  SSL_RSA_WITH_3DES_EDE_SHA&lt;br/&gt;
      [C013]  TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA&lt;br/&gt;
      [C014]  TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA&lt;br/&gt;
      [C009]  TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA&lt;br/&gt;
      [C00A]  TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA&lt;br/&gt;
      [0032]  TLS_DHE_DSS_WITH_AES_128_SHA&lt;br/&gt;
      [0038]  TLS_DHE_DSS_WITH_AES_256_SHA&lt;br/&gt;
      [0013]  SSL_DHE_DSS_WITH_3DES_EDE_SHA&lt;br/&gt;
      [0004]  SSL_RSA_WITH_RC4_128_MD5&lt;br/&gt;
  
  Compression:&lt;br/&gt;
      [00]    NO_COMPRESSION&lt;br/&gt;
  </code></pre>