How to Enable TLS 1.2 as the Default Security Protocol on Windows Servers | IT Nota

Transport Layer Security ( TLS ) are cryptanalytic protocols designed to provide communications security over a computer network, typically between a web site and a browser. TLS 1.0 and its deprecate predecessor, SSL are vulnerable to some well-known security issues such as POODLE and BEAST attacks. According to NIST, these vulnerabilities can not be fixed or patched, therefore all companies, particularly banks and other fiscal institutions who are notoriously dense in upgrading theirs systems, need to upgrade to a plug alternative deoxyadenosine monophosphate soon as potential, and disable any disengagement to both SSL and the older TLS 1.0. As of 30 June 2018, SSL and TLS 1.0 should be disabled and more secure encoding protocol such as TLS 1.2 ( or at the minimal TLS 1.1 ) is required to meet the PCI Data Security Standard ( PCI DSS ) for safeguarding requital data. The next interrogate then how on do we enable TLS 1.2 on Windows Servers ? specially on older servers such as Windows Server 2008 as many companies are not on the latest and greatest operating systems ?

This post will address what to look for and how to enable TLS 1.2 as the nonpayment protocol for Windows Server 2012 R2 or older. IMPORTANT: As always and it ’ s worth repeat, you need to backup your current register settings before attempting any of these changes on your servers .

Enable TLS 1.2 on Windows Servers 2008 SP2 or later

The blanket statement to enable your TLS 1.2 on your server from Windows Server 2008 SP2 or late. Microsoft provided an update to add support for TLS 1.1 and TLS 1.2 for Windows Server 2008, but it requires Windows Server 2008 SP2 installed. so just to submit the obvious, TLS 1.1 and TLS 1.2 are not supported for 32-bit Windows Server 2008 SP1 .

  1. launching regedit.exe .
  2. In register, go to :
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
    
  3. Create a newly DWORD entrance with a name TLS 1.2 and create another subkey Client and Server .
  4. Under the subkey Server, make another DWORD Enabled with a value of 1 .
  5. placid under the subkey Server, create a DWORD DisabledByDefault with a measure of 0 .
  6. You must create a subkey DisabledByDefault entrance in the appropriate subkey ( Client, Server ) and set the DWORD measure to 0 since this entrance is set to 1 by default. Windows 2008 Standard enabling TLS 1.2
  7. Reboot the server and quiz .

Enable TLS 1.2 on .NET Framework 3.5 (including 2.0)

.NET Framework 3.5 or earlier did not originally provide support of applications to use TLS System Default Versions as a cryptanalytic protocol. however, for Windows Server 2012 R2, check if KB3154520 is installed ( or KB3154519 for Windows Server 2012 ; KB3154518 for Windows Server 2008 R2 ; KB3154517 for Windows Server 2008 SP2 ) .

How to check the KB updates

  1. Right-click on the Windows button and choice Programs and Features. Windows Server 2012 R2 Programs and Features
  2. On Programs and Features window, click onthe View installed updates on the forget paneling. Windows Server 2012 R2 View installed updates
  3. You will see a list of the updates that you can narrow down or do a very specific search by using the Search Installed Updates box. You can type in the KB number ( i, “ KB3154520 ” ). Windows Server 2012 R2 KB3154520 update
  4. If the corresponding KB is already installed, we just need to enable it via register change. differently, you need to install the patch from either of the links for Windows Server 2012 R2 ( or use the same match links above for earlier versions of Windows Server ) .

Registry Change

  1. launch regedit.exe .
  2. Go to :
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727
    
  3. Create a new entrance SystemDefaultTlsVersions with a DWORD respect set to 1 .
  4. Create a new entrance SchUseStrongCrypto with a DWORD rate set to 1 .
  5. Go to :
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
    
  6. Create a newly entry SystemDefaultTlsVersions with a DWORD value set to 1 .
  7. Create a raw entry SchUseStrongCrypto with a DWORD value set to 1 .
  8. For 64-bit OS, the like changes besides needed for the stick to locations :
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727
    
  9. Create a fresh entry SystemDefaultTlsVersions with a DWORD value set to 1 .
  10. Create a new entry SchUseStrongCrypto with a DWORD value set to 1 .
  11. Go to :
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
    
  12. Create a new entrance SystemDefaultTlsVersions with a DWORD value set to 1 .
  13. Create a new entry SchUseStrongCrypto with a DWORD rate set to 1 .
  14. test .

Windows Server 2012 R2 TLS default

Enable TLS 1.2 as default for WinHTTP

This may be applicable for any classic ASP or VB6 applications that use WinHTTP. Prior to Windows 10 and Windows Server 2016, TLS 1.1 or 1.2 is not enabled by default for client-server communications through WinHTTP. To set TLS 1.2 by default, do the come :

  1. Create a register entry DefaultSecureProtocols on the pursue location :
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
    
  2. Set the DWORD value to 800 for TLS 1.2 .
  3. For 64-bit OS, repeat step 1 and 2 on the following localization :
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
    
  4. Reboot the server and test .

Windows Server 2012 R2 DefaultSecureProtocols registry entry Windows 10 and Windows Server 2016/2019 support TLS 1.2 for client-server communications by using WinHTTP.

Buy me a coffee?

Buy me a coffee If you find this position helpful and would like to buy me a coffee to support the work here, you ’ ll have our big thanks !
Support IT Nota: Buy Me a coffee bean

Further Reading

update to enable TLS 1.1 and TLS 1.2 as default plug protocols in WinHTTP in Windows
TLS/SSL Settings
How to enable TLS 1.2 for Configuration Manager
Transport Layer Security ( TLS ) best practices with the .NET Framework
Support for TLS System Default Versions included in the .NET Framework 2.0 SP2 on Windows Vista SP2 and Server 2008 SP2
Support for TLS System Default Versions included in the .NET Framework 3.5.1 on Windows 7 SP1 and Server 2008 R2 SP1
Support for TLS System Default Versions included in the .NET Framework 3.5 on Windows Server 2012
Support for TLS System Default Versions included in the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2
How to enable TLS 1.2 on the web site servers and outback site systems
Use Case Scenario : Known issues connecting SSRS Server 2016 ( raw ) to SQL Server 2008 ( erstwhile ) with TLS

Download

Solving the TLS 1.0 Problem ( MS Word document )

generator : https://thefartiste.com
Category : Tech

About admin

I am the owner of the website thefartiste.com, my purpose is to bring all the most useful information to users.

Check Also

articlewriting1

Manage participants in a zoom meeting webinar

Call the people who attend the meet as follows Alternate host host Who scheduled the …

Leave a Reply

Your email address will not be published.