Windows Server - How to Enable TLS 1.2 Registry Script (Disable TLS 1.0, 1.1, RC4, SSL 2.0, 3.0, DH)

Рет қаралды 64,998

6 жыл бұрын

Registry Script - bit.ly/TLS-Security-Fix (rename to .reg)
SSL Labs - entrust.ssllabs.com/
Microsoft SQLServer TLS Support - blogs.msdn.microsoft.com/psss...
Microsoft TLS Poodle Fix - www.microsoft.com/en-us/downl...
Security Standards Council - blog.pcisecuritystandards.org...
Windows Server - How to Enable TLS 1.2 Registry Script

Пікірлер: 31

@CodeCowboyOrg 6 жыл бұрын

Reboot is Required by the way. Check the Description Area for the Registry Script.

@CyberAbyss007 5 жыл бұрын

Thank you!!! Just what I was looking for. Just did my server and went from score of F to A. You ROCK sir!

@sirlawrencet 5 жыл бұрын

From an F to an A on SSL Labs. Bless you.

@Dadiusx 5 жыл бұрын

Excellent script and video, thank you!

@TheCodeMater 5 жыл бұрын

Excellent Video and all script links very handy- Thanks Mate!

@johandubuisson5541 5 жыл бұрын

Thank you for the explanation and script, works great for Windows, do you have a similar fix for a Linux/Unix box?

@ciali80 3 жыл бұрын

Funziona benissimo è stato veramente utile ho risolto tutti i problemi grazie!

@venicemaps 4 жыл бұрын

Worked for me, super easy and after rebooting and retesting using the SSLLabs tool, my score went from "F" to "B", yea team!! Thank you, CodeCowboyOrg...

@OzanSirin 5 жыл бұрын

Thank you, it worked great :-)

@MrRhyox 5 жыл бұрын

It actually works!

@luft_fafe 3 жыл бұрын

Thanks so much, very helpful :-)

@janrinosabile7469 4 жыл бұрын

do we need to restart the server itself after the run of the script?

@JuanSanchez 3 жыл бұрын

would this work on a exchange 2010 on Server 2008 R2?

@guptasreenath 4 жыл бұрын

I have successfully achieve A, but unable to send emails through SQL after running the script.

@robertgruett1444 6 жыл бұрын

Fantastic video, but I'm not entirely clear on a few points and I hope you can clear up my confusion. [1] When I look at my own 2012 servers I see 'Server' but not 'Client' registry keys in the registry location in question. Are both absolutely required or just the 'Server' entries? I'm not really sure what the point of the client entries are. [2] My disabled protocols (SSL 3.0 for example) simply show the 'Enabled' DWORD set to 0, but no 'DisabledByDefault' DWORD. Is the disabled DWORD entry best practice, required, or optional? If required, then I suspect my server may be supporting protocols I don't want, but if optional then I don't get why you'd put it in at all. [3] Your script doesn't have anything in it to disable TLS 1.0 despite having been released in May 2018. I believe you said this was to provide compatibility with older browsers, but from what I understand TLS 1.0 should pretty much be turned off on all servers across the board at this point, correct? Anyway, thanks in advance for the help.

@PoolarityChannel 5 жыл бұрын

The client entries is when that computer is initiating connections to other servers. The server setting is when the computer is accepting connections.

@krishnakunkala9395 2 жыл бұрын

Do you have an updated script (link is broken) and with updated Ciphers...

@tomyum2305 4 жыл бұрын

Hi, My 2012R2 server box. Under TLS1.2>Server>NAME: Enabled TYPE: REG_DWORD, DATA: 0Xffffffff(4294967295) instead of DATA: 0x00000001(1)? What is the difference between DATA: 0Xffffffff(4294967295) vs DATA: 0x00000001(1)?

@deadsmile2011 3 жыл бұрын

It work for iis6 ?? Plz help

@cd78 2 жыл бұрын

Why are enabling RC4 - RC4 is deprecated. You then say you are disabling them yet the script says RC4 enabled???

@jaidahmed2955 2 жыл бұрын

Hi all Is anyone can help me here if i disable TLS 1.0 and enable TLS 1.1 and 1.2 then my crystal reports is not working

@shred2bits459 5 жыл бұрын

Does this work for Windows server 2012 r2?

@CodeCowboyOrg 5 жыл бұрын

Yes

@mquinnusa 3 жыл бұрын

This disables RDP on Windows 2016. Be careful.

@yogesh_jadhav 3 жыл бұрын

does it work on windows 2003 server

@Mukesh-ho2fo 3 жыл бұрын

Hi can you share me script to disable TLS 1.0 AND TLS 1.1

@mariciekarlin2956 2 жыл бұрын

GX40 Official is a very trusted provider of scam tools

@rotorblast 4 жыл бұрын

will this work on server 2008 r2?

@KhelmartPlus 4 жыл бұрын

Hello Kelvin , Have you tired the script for server 2008 r2 ? we are also facing same issue

@rotorblast 4 жыл бұрын

Khelmart.com yes but I believe my issue is that tls 1.1 and 1.2 will only work with IIS 7.5 and we’re running Windows 2008 standard which only allows for IIS7.0

@KhelmartPlus 4 жыл бұрын

@@rotorblast Thanks ... for response