Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A question has come in about the need to turn off SSLv2 and stop ciphers below 128.

We currently run windows server 2003 so know about the fiddle with the registry to fix that.

We are looking at upgrading / moving our services to Windows Server 2008, but wondered if all of the issues with SSLv2 and SSLv3 have meant that Windows Server 2008 comes with these options turned off?

share|improve this question
up vote 7 down vote accepted

Windows 2008 has SSLv2 and SSLv3 enabled by default. To disable SSLv2 on Windows 2008 you may do the following:

Create a key named Server under: HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0

Create a DWORD value and name it Enabled ensure the value data is 0x0

Keep in mind that this setting only affects services and .exe's that actually use SCHANNEL.dll for SSL

share|improve this answer
+1 for posted faster than me. :P . And for OP,;EN-US;245030 for more details. – Grumpy Jan 11 '13 at 16:22
It seems this is still true for Server 2008R2 and 2012 – Peter Hahndorf Jan 11 '13 at 17:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.