Hi,

At a customer we have Exchange 2013 setup on a Windows Server 2012 R2 virtual machine.

Last weekend we installed the latest patches and since then we are experiencing some errors regarding TLS. The System Eventlog is full of events from SChannel with ID 36887 saying: "A fatal alert received from the remote endpoint. The TLS Protocol defined fatal alert code is 40." 

When I search the internet I immediately found this topic: http://support2.microsoft.com/kb/2992611/en-us stating it had something to do with KB2992611 being installed.

This stated that I should download the update KB3018238. But I can't seem to download this KB for Windows Server 2012 R2. I searched the internet, the Microsoft Update Catalog, etc.

Any ideas on where I could find this KB for 2012 R2?

Many thanks in advance!

Best regards,

Bert

Hi,

Depending on my research, KB3018238 is for Windows Server 2008 R2 and Windows Server 2012. KB2992611 only add the new cipher suites to Windows Server 2008 R2 and Windows Server 2012. KB3018238 is used to remove the new cipher.

For your question, I want to double confirm whether client failed connect to Exchange server with error. Please post relevant error, its more helpful for further troubleshooting.
Please check if the cipher suits used by the server and client are matched. Besides, There have a few Schannel updates in the last couple months, for example KB3011780. We can install it in Windows Server 2012 R2 for test.

Thanks,