Hot answers tagged fips-140-2
It depends on the version of Windows/IIS. In 2003 (IIS 6) and earlier, this can't be done. You can only enable/disable ciphers. In Windows 2008 (IIS 7) and later, you can do this through a GPO (if you're domain joined, and I'm guessing this server isn't if it's PCI compliant). More info here: http://technet.microsoft.com/en-us/library/cc766285(v=ws.10).aspx ...
Why would you assume that there's a priority needed? No compliance standard that I've ever heard of has recommended a specific priority; after all, if a cipher's insecure, it should be turned off instead of just de-prioritized. That said, preferring RC4 over CBC-constructed ciphers might be wise until TLS 1.1 is widely deployed; see CVE-2011-3389.
The easiest approach would be to limit who can log on to a given computer to a single user account (be it a local or domain one); this can be easily done by restricting the "log on locally" right in the local security policies or via a GPO. Also, the various "log on as..." rights are a good place to start. If you instead want to allow many users to log on, ...
To go into FIPS-approved mode, follow the below steps, as found in the FIPS 140-2 validation document for that series of Cisco routers. Formatting here is limited, and I'm not going to spend an hour messing around with markdown to make it match, so visit the link if you want a more readable format. Pages 36-38. Secure Operation The Cisco 1905, Cisco 1921, ...
You will follow a similar procedure to http://www.sslshopper.com/article-how-to-disable-ssl-2.0-in-iis-7.html except you will disable more than just SSL 2.0 http://support.microsoft.com/kb/187498 also has info
Only top voted, non community-wiki answers of a minimum length are eligible