Anyone know how to disable certain SSL versions and only enable others in IIS 7.5?
Notes: The same proceedure applied to key names
This is something you need to fix in regedit,
regedit can be opened with "start", "run",
once there, find this entry:
Right-click on the SSL 2.0 folder and select New and then click Key. Name the new folder Server.
Inside the Server folder, click the Edit menu, select New, and click DWORD (32-bit) Value.
Enter Enabled as the name and hit Enter.
Ensure that it shows
Restart the computer.
a nice explanation can be found here, including how to disable other weak ciphers
If you are not comfortable manually editing the registry, you can either use a power shell script or a GUI program to do all this for you.
There is a great script by Alexnder Hass here - Setup your IIS for SSL Perfect Forward Secrecy and TLS 1.2
I personally like to use IIS Crypto it is so easy and lets you order and choose crypto suites, ciphers etc. You can just use the 'best practices' if you are not sure what you are doing.
Also, once you are done rebooting the server, head over to SSL Labs to test your server.