2

Do I need to enable TLS 1.0 in Windows Server 2008 R2, or is it enabled by default? I did search and found out that TLS 1.1 and 1.2 is supported but disabled by default. How about TLS 1.0?

I tried googling and wasn't able to find a concrete answer.

7

TLS 1.0 is enabled by default in Server 2008 R2.

Applies To: Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista

[...]

This subkey controls the use of TLS 1.0.

Applicable versions: As designated in the Applies To list that is at the beginning of this topic.

Registry path: HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

To disable the TLS 1.0 protocol, create an Enabled entry in the appropriate subkey. This entry does not exist in the registry by default. After you have created the entry, change the DWORD value to 0. To enable the protocol, change the DWORD value to 0xffffffff.

Source: http://technet.microsoft.com/en-us/library/dn786418.aspx

  • Thanks a million!! that's exactly what I need. Again, try to upvote but doesn't have enough reputation. :) – Jach Dec 4 '14 at 4:22
  • No worries, marking the answer is worth more anyway :) – austinian Dec 4 '14 at 4:28
2

Check there: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

You will see TLS 1.0\Client\ & TLS 1.0\Server.

In each folder create those two key:

DWORD DisabledByDefault:0 DWORD Enabled:1

You can do the same trick for TLS 1.1 or 1.2 if the keys are not there

  • Thanks for quick response. But I have checked and the "TLS 1.0" key doesn't exist and yet my test to ONLY TLS enabled service is ok. That's why I am asking whether it is the case that TLS 1.0 is enabled by default. By the way, try to upvote but don't have enough reputation :) – Jach Dec 4 '14 at 3:56
  • It's enabled by default, but I thougth the registry would had been there – yagmoth555 Dec 4 '14 at 4:02
  • thanks again for quick response. Do you have a microsoft link to support that? I couldn't find such evidence with my limited ability in googling. Thanks. – Jach Dec 4 '14 at 4:07

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.