These servers are running Windows server Datacenter 2016 on Azure.

As per the documentation, by default TLS 1.2 is enabled on Windows server Datacenter 2016 but when i checked the registry and registry keys related to TLS does not exist.

Then how can i enable TLS on this server

  • Which registry keys did you check? What do you want TLS for? RDP? SMB? WWW? What makes you believe tls is not enabled?
    – vidarlo
    Feb 15 at 7:46
  • Computer\HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
    – pl-jay
    Feb 15 at 7:51
  • Using TLS for both RDP and WWW
    – pl-jay
    Feb 15 at 7:52
  • Since there aren't any registry keys related to TLS, i guessed it TLS not enabled
    – pl-jay
    Feb 15 at 7:54
  • 1
    Your question doesn't make a lot of sense. TLS's isn't something that is just "on" you need to configure it for whatever service you need it for. If you want it for IIS then you need to install a cert and enable it for your web app, for RDP you need to configure a cert in the cert store and configure IIS to use it. You need to go look at the services you want to run and understand how TLS works with those services. Looking for a registry key is not going to help you.
    – Sam Cogan
    Feb 15 at 8:20

1 Answer 1


On Windows Server 2016, if there are no specific Registry values for TLS 1.2, it means it is enabled for both server and client purposes. There is nothing you need to do.

You need registry entries to turn it off.

You can have registry to have it on, but if they are not there, it is on by default.

  • Thanks for the explanation.
    – pl-jay
    Feb 16 at 14:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.