We are using .Net to make web service calls the Salesforce API. Is there a way to know for sure that the calls are using TLS 1.2? Are there any API logs or records of the protocol is use in Salesforce we can review to be confident the change is working?
Check your Login History (under Setup). It now includes a TLS version column. There is also an equivalent field on LoginHistory called TlsProtocol.
Another option is to change the API endpoint for a short period to one that only supports TLS 1.1 or 1.2.
E.g. change https://login.salesforce.com/services/Soap/u/32.0 to https://tls1test.salesforce.com/services/Soap/u/32.0. Seeing
"INVALID_LOGIN: Invalid username, password, security token; or user locked out." or
“Content is not allowed in prolog.” in the response indicates the connection was successful with TLS 1.1 or 1.2.
- How can I locate users making TLS connections in my org?
- How to view all recent TLS 1.0 logins for an organization (link appears to be broken currently...)
Cached Content for broken Knowledge Article # 000247882