Thread: Общие вопросы (General Questions)/Restrict Weak Ciphers in Windows Server 2003

Restrict Weak Ciphers in Windows Server 2003

techrepublic.com.com/5208-7343-0.html


HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers



Then you simply create a DWORD "Enabled" and add a Hex 0 in the field. This is necessary for all the ciphers with less that 128-bit encryption.



I currently have "Enabled = 0" in these keys:

DES 56/56

NULL

RC2 40/128

RC4 40/128

RC4 56/128



and I have "Enabled = 0" in Protocols:

PCT 1.0 - Server and Client

SSL 2.0 - Server and Client



I did not edit Ciphers:

RC2 128/128

RC4 128/128

Triple DES 168/168



and Protocols:

SSL 3.0

TLS 1.0

 





Re: Restrict Weak Ciphers in Windows Server 2003

www.eggheadcafe.com/software/aspnet/34218928/disabling-ssl-3-andor-tl.aspx