Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Windows 2012: PKI: AES_256_CBC ?

Answered Windows 2012: PKI: AES_256_CBC ?

  • Tuesday, December 04, 2012 7:05 PM
     
     
    Sign In to Vote
    0

    Hello,

    I've set up in a test environment a Windows Server 2012 DataCenter machine with
    a Domaincontroller and an enterprise Root CA.

    If I open up an internal https website and take a look at the certificate I see the following information:

    The connection uses TLS 1.1
    The connection ins encrypted using AES_128_CBS, with SHA1 for message authentication and
    ECDHE_ECDSA as the key exchange machanism.

    However, how can I replace AES_128_CBC by AES_256_CBC?
    As far as I am right, I need a Suite B PKI.
    I followed the Guide "Suite B PKI Step-by-Step Guide" on TechNet but even after
    making the described changes the encryption is still AES_128_CBC.

    Thanks in advance.

     

All Replies