It is my understanding from reading this article:


That in the registry TLS 1.2 should be enabled by default on Windows Server 2012 R2.

However, checking the registry on our webservers, this key is missing?

I am using AWS EC2 boxes with the vanilla Windows Server 2012 R2 AMI.

Any help would be greatly appreciated.


2 Answers 2


I believe "enabled by default" means the key doesn't have to exist for it to be turned on. You only need to add the value if you want to disable it.

  • That makes sense then, thank you for your answer, I guess my issue must be in the application not the server
    – Uberzen1
    Jan 7, 2016 at 18:33

IIS Crypto is a great tool for easily seeing what protocols and ciphers are enabled on your server

  • Thanks, I did download that and try it in Dev but was reluctant to drop the exe and poke around on live.
    – Uberzen1
    Jan 7, 2016 at 18:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.