Return
-
Title
Authenticate via phone activity (TeleSign) bypassing the proxy settings system-wide static proxy (netsh) -
Description
Authenticate via phone activity (TeleSign) bypassing the proxy settings system-wide static proxy (netsh) and it is failing to send the SMS with the following message.
"Unable to request SMS message. This might happen if TLS 1.2 is not enabled. To enable TLS 1.2, see https://technet.microsoft.com/en-gb/library/dn786418.aspx#BKMK_SchannelTR_TLS12 Details: System error occurred. For more information, view the event log."
-
Cause
Product designer, by default Password Manager will connect externally by the service account proxy session. -
Resolution
WORKAROUND 1
Force all applications including Windows services which use WinHTTP with default proxy by adding the ProxySettingsPerUser in the registry, for further details please refer to the following two Microsoft articles below.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-proxy-internet?view=o365-worldwide
https://learn.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-ie-clientnetworkprotocolimplementation-hklmproxyserver
WORKAROUND 2
Manually configure the proxy for the service account used by Password Manager.