======  Upgrading App Store Connect (ASC) to use TLS 1.2 ======


===== Outline =====

The Transport Layer Security (TLS) protocol is an industry standard designed to help protect the privacy of information communicated over the Internet. All communication between an App Store Connect and the Industrial App Store is encrypted using TLS.

The latest version of App Store Connect uses TLS 1.2 (as recommended by Microsoft). However, earlier installations may still use TLS versions 1.0 or 1.1 (deprecated since Mar 2020).

To check if your App Store Connect requires upgrading, read on...

===== Is my App Store Connect affected? =====

 1. Log on to server hosting App Store Connect software

 2. Check version of file: 
  %ProgramFiles%\Intelligent Plant\Data Core\DataCore.ApplicationHost.exe

{{ :datacore:hostversion.png?400 |}}

3. If version is less than **3.2.16245 (8 Feb 2021)** action is required. Either upgrade App Store Connect to the latest version or configure security via windows registry.


===== How to upgrade App Store Connect =====

==== 1. Before you upgrade ====

1.1 Take a [[app_store_connect:back_up_and_restore|backup]] 
  
1.2 Note down any non-standard configuration that will need to be re-applied following the upgrade. This includes...

  * [[Data_Core:How to Run App Store Connect under a Service Account|Running Intelligent Plant services under a service account]]
  * [[Big_Data_Service:Modify Data Storage Location|Modifying the Big Data Storage Location]]
  * [[Big_Data_Service:Use an Alternative Instance|Using an alternative Elasticsearch instance]]
  * [[Big_Data_Service:Increase Big Data Service RAM|Increasing Big Data Service RAM]]
  * [[Data Core:app_store_connect_updates|Modifying the Update Check Schedule]]

==== 2. Reinstall App Store Connect ====

The latest version of App Store Connect is available for download from the [[https://appstore.intelligentplant.com/Home/DataSources|Industrial App Store]]

==== 3. Verify successful upgrade ====

3.1 Open Windows services and verify the following services are running:

  * Intelligent Plant Big Data Service 2.0
  * Intelligent Plant Data Core Service

3.2 Open admin UI and check connection status:

  * http://localhost:2006/Service/AppStore

3.3 Check data sources are running

  * Open admin UI http://localhost:2006/Service/
  * Select "Configure Data Core"
  * Verify all configured components under "Real-Time Data" and "Alarms & Events" are reporting a healthy status.


===== How to configure security via Windows Registry =====

If you are unable to upgrade App Store Connect, refer to the following Microsoft article for an alternative method of configuring TLS.

  * [[https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls#for-net-framework-35---452-and-not-wcf|Transport Layer Security (TLS) best practices with the .NET Framework / For .NET Framework 3.5 - 4.5.2 and not WCF]]


Note to Editor: More info required here. Provide explicit instructions for versions of ASC according to respective .net version.