StrongCryptoSettings: Difference between revisions

From Piszczynski
piszczynski>Aleks
(Created page with " == Registry Keys to enable Strong Crypto Settings on Windows Servers == Use the following keys to disable TLS<1.2 and enable strong crypto in .NET applications: <pre> Windo...")
 
m (2 revisions imported)
 
(One intermediate revision by one other user not shown)
Line 3: Line 3:


Use the following keys to disable TLS<1.2 and enable strong crypto in .NET applications:
Use the following keys to disable TLS<1.2 and enable strong crypto in .NET applications:
 
----
<pre>
<pre>
Windows Registry Editor Version 5.00
Windows Registry Editor Version 5.00
Line 34: Line 34:
"DisabledByDefault"=dword:00000000
"DisabledByDefault"=dword:00000000
</pre>
</pre>
----

Latest revision as of 22:32, 15 November 2023

Registry Keys to enable Strong Crypto Settings on Windows Servers

Use the following keys to disable TLS<1.2 and enable strong crypto in .NET applications:


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000