We recently made the registry changes to force our system to only use TLS 1.1 and 1.2 and disable anything TLS 1.0 and lower. Most of our services are fine after the change except TFS 2013 and I can't find the fix for it. The web application is available over https but developers are having check-in issues from Visual Studio 2017. The build attempt goes into the queue and then fails after running for a few minutes. What's even weirder is I am having TFS admin console issues as well. Even though the web application is available in the admin console I get errors and am unable to open "Group Membership", "Administer Security", or test URLs under "Change URLs".
The server certs and IIS bindings are all configured properly for TLS 1.1+ (as I said, the web application is accessible) and I'm certain the registry changes to enable TLS 1.1+ and disable all others is the cause because rolling back the changes removed all issues.
Anyone have any idea what is going on here and how to fix it?