I am running a Windows 2008 server with IIS7. I need to use SSL 3.0 for PCI compliance but whenever I read up on using it, all the articles explain to disable SSL 2.0. If I do this, will IIS automatically use SSL 3.0 from that point on?
In the registry here
[HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders \SCHANNEL\Protocols] it only has a
SSL 2.0 folder with a
Client folder in it, is that correct? Shouldn't there be a
SSL 3.0 folder?