none
How to disable TLS 1.0 on Windows 2012 server RRS feed

  • Question

  • Hello, I wish to disable TLS 1.0 on our servers (we've applied the most recent SQL Server service packs and will be updating the .Net Framework).  How can I do that please?  I come across instruction for disabling PCT, but am not sure if that applies to TLS?

    Best regards, Tim

    Tuesday, May 10, 2016 9:40 AM

All replies

  • Hi,

    I found IISCrypto by NARTAC very useful, it provides a simple GUI for configuring TLS/SSL (SChannel) https://www.nartac.com/Products/IISCrypto/Download

    HTH

    Martin

    • Proposed as answer by syshomme Tuesday, February 20, 2018 11:11 PM
    Tuesday, May 10, 2016 9:55 AM
  • Hi,

    Please check if the following link is helpful:

    https://support.microsoft.com/en-us/kb/245030

    Please restart the computer after you add the registry key.

    Best Regards,


    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Wednesday, May 11, 2016 8:32 AM
    Moderator
  • Thanks, Steven, that is helpful.  So, if the TLS 1.0 key is not present, is it a case of adding it with a value of 0x0 to make sure it is disabled?

    Would you recommend a particular test for checking if it is enabled or not?

    Best regards, Tim

    Wednesday, May 11, 2016 9:38 AM