Windows 7 and 2008 R2 supports TLS 1.1 and TLS 1.2. However these protocol versions are not enabled on these OS by default. They are only activated per default on Windows 8 and higher. In order to enable TLS 1.1 and 1.2 the following registry keys must be imported:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"DisabledByDefault"=dword:00000000

For more infos read KB 245030 (How to restrict the use of certain cryptographic algorithms and protocols in Schannel.dll) and TLS/SSL Settings.

.

Leave your comments

Post comment as a guest

0

Comments

    • No comments found