Windows Server - How to Enable TLS 1.2 Registry Script (Disable TLS 1.0, 1.1, RC4, SSL 2.0, 3.0, DH)

Windows Server - How to Enable TLS 1.2 Registry Script

[CodeCowboyOrg]

Reboot is Required by the way. Check the Description Area for the Registry Script.

[CyberAbyss]

Thank you!!! Just what I was looking for. Just did my server and went from score of F to A. You ROCK sir!

[ciali]

Funziona benissimo è stato veramente utile ho risolto tutti i problemi grazie!

[venicemaps]

Worked for me, super easy and after rebooting and retesting using the SSLLabs tool, my score went from "F" to "B", yea team!! Thank you, CodeCowboyOrg...

[sirlawrencet]

From an F to an A on SSL Labs. Bless you.

[robertgruett]

Fantastic video, but I'm not entirely clear on a few points and I hope you can clear up my confusion. [1] When I look at my own 2012 servers I see 'Server' but not 'Client' registry keys in the registry location in question. Are both absolutely required or just the 'Server' entries? I'm not really sure what the point of the client entries are. [2] My disabled protocols (SSL 3.0 for example) simply show the 'Enabled' DWORD set to 0, but no 'DisabledByDefault' DWORD. Is the disabled DWORD entry best practice, required, or optional? If required, then I suspect my server may be supporting protocols I don't want, but if optional then I don't get why you'd put it in at all. [3] Your script doesn't have anything in it to disable TLS 1.0 despite having been released in May 2018. I believe you said this was to provide compatibility with older browsers, but from what I understand TLS 1.0 should pretty much be turned off on all servers across the board at this point, correct? Anyway, thanks in advance for the help.

[cd]

Why are enabling RC4 - RC4 is deprecated. You then say you are disabling them yet the script says RC4 enabled???

[krishnakunkala]

Do you have an updated script (link is broken) and with updated Ciphers...

[johandubuisson]

Thank you for the explanation and script, works great for Windows, do you have a similar fix for a Linux/Unix box?

[JuanSanchez]

would this work on a exchange 2010 on Server 2008 R2?

[guptasreenath]

I have successfully achieve A, but unable to send emails through SQL after running the script.

[TheCodeMater]

Excellent Video and all script links very handy- Thanks Mate!

[shredbits]

Does this work for Windows server 2012 r2?

[tomyum]

Hi, My 2012R2 server box. Under TLS1.2>Server>NAME: Enabled
TYPE: REG_DWORD, DATA: instead of DATA:
What is the difference between DATA: vs DATA:

[Dadiusx]

Excellent script and video, thank you!

[jaidahmed]

Hi all
Is anyone can help me here if i disable TLS 1.0 and enable TLS 1.1 and 1.2 then my crystal reports is not working

[mquinnusa]

This disables RDP on Windows 2016. Be careful.

[Mukesh-hofo]

Hi can you share me script to disable TLS 1.0 AND TLS 1.1

[mariciekarlin]

GX40 Official is a very trusted provider of scam tools