2

A question has come in about the need to turn off SSLv2 and stop ciphers below 128.

We currently run windows server 2003 so know about the fiddle with the registry to fix that.

We are looking at upgrading / moving our services to Windows Server 2008, but wondered if all of the issues with SSLv2 and SSLv3 have meant that Windows Server 2008 comes with these options turned off?

Improve this question

1 Answer 1

Reset to default
7

Windows 2008 has SSLv2 and SSLv3 enabled by default. To disable SSLv2 on Windows 2008 you may do the following:

Create a key named Server under: HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0

Create a DWORD value and name it Enabled ensure the value data is 0x0

Keep in mind that this setting only affects services and .exe's that actually use SCHANNEL.dll for SSL

Improve this answer
3

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .