Do I need to enable TLS 1.0 in Windows Server 2008 R2, or is it enabled by default? I did search and found out that TLS 1.1 and 1.2 is supported but disabled by default. How about TLS 1.0?
I tried googling and wasn't able to find a concrete answer.
TLS 1.0 is enabled by default in Server 2008 R2.
Applies To: Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista
This subkey controls the use of TLS 1.0.
Applicable versions: As designated in the Applies To list that is at the beginning of this topic.
Registry path: HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
To disable the TLS 1.0 protocol, create an Enabled entry in the appropriate subkey. This entry does not exist in the registry by default. After you have created the entry, change the DWORD value to 0. To enable the protocol, change the DWORD value to 0xffffffff.
Check there: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
You will see TLS 1.0\Client\ & TLS 1.0\Server.
In each folder create those two key:
DWORD DisabledByDefault:0 DWORD Enabled:1
You can do the same trick for TLS 1.1 or 1.2 if the keys are not there