How To Enable TLS 1.2 on windows 10? 

Vidam, we are glad to know that our video is very helpful to fix your issue. Please stay with us for videos

We are glad to know that our video is very useful to you! Please stay with us for more videos.

William Brutzman! Yes, It will also work for Windows 8.

Rodrick, You are welcome. Please stay with us for more videos

Sakanet, It depends on your requirement. Windows 8.1, Windows Server 2012 R2, Windows 10, Windows Server 2016, and later versions of Windows natively support TLS 1.2 for client-server communications over WinHTTP. To disable TLS 1.0/ TLS 1.1 for client or server, change the DWORD value to 0. If an SSPI app requests to use TLS 1.0, it will be denied. To disable TLS 1.0/ TLS 1.1 by default, create a DisabledByDefault entry and change the DWORD value to 1. If an SSPI app explicitly requests to use TLS 1.0, it may be negotiated. Note: Please don't forget to restart your system after applying the above steps.

​@@Accuwebhosting I really appreciate your detailed message. When I browse to "Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" I have no folders like you to in this video. So, based on your instructions, Under Protocol folder, I created TLS 1.0 folder. Under TLS 1.0 folder, i created Client folder. I right clicked on Client folder and created a DWORD 32 and named it as "DisabledByDefault" and changed the value to 1. I restarted the computer and scanned it with nmap tool with this command: nmap -sV -p 4343 --script ssl-enum-ciphers This command checks to see if outdated protocols are being used and it is as you can see the following result: | ssl-enum-ciphers: | TLSv1.0: | ciphers: | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A | TLS_RSA_WITH_AES_128_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_AES_256_CBC_SHA (rsa 1024) - A | compressors: | NULL | cipher preference: client I also did the same thing for TLS 1.1 and same result. Please let me know if you can think of anything else. By the way, this is a Windows 10 computer. Thanks!

@Alexander Villalta - Thank you for watching our video. We are glad to know that our video is very useful to you. Please stay with us for more video.

Glad to know that it's worked for you :)

Glad to liked it !

We are happy to know that it's worked for you.

You are welcome!

Can you please share some extra information which didn't work for you? e.g screen capture or step or screen which is showing different to you.

Also, have you reboot the system after performing these steps?

Dident work for me 2

We are glad you liked the video.

Glad to know that worked for you :)

Thank you for your comment, Gustavo :) Please ensure that you have rebooted your system after performing all the steps mentioned above. You can verify the TLS version from the internet option. Below are the steps on how to verify the TLS version on Windows 10 operating system. Step 1: Click the Windows button in the lower left-hand corner (standard configuration) of your Desktop. Step 2: Type "Internet Options" and click the "Best Match" of the same name. It will open Internet Properties. Step 3: Click on the Advanced tab and scroll down at bottom. If TLS 1.2 is checked, you are already all set. If it is not, please check the box adjacent to Use TLS 1.2 and then click on Apply.

You are most welcome!

@@Accuwebhosting it solved the problem momentarily. Again showing the same TLS message. Please help.

Yes, Before enabling TLS 1.2 and disabling the older protocol on the server and remote system (client), you should ensure that the clients are capable and properly configured to use TLS 1.2. There are three tasks for enabling TLS 1.2 on the client. - Update Windows and WinHTTP - Ensure that TLS 1.2 is enabled as a protocol for SChannel at the Operating system level - Update and configure the .NET Framework to support TLS 1.2 Windows 8.1, Windows Server 2012 R2, Windows 10, Windows Server 2016, and later versions of Windows natively support TLS 1.2 for client-server communications over WinHTTP.

@@Accuwebhosting Thanks for the reply, its really helpful. There is very limited content on this topic in terms of explanations. You're doing great job. BTW Do you have a video or some link on where/how to keep client certificate/keys (as in mutual TLS client certificates are also needed)

@@abhitravelvlog0407 No. But we have forwarded your request to our video creating department. You will get a notification if it is created by us. Please stay with us for more videos.

@@abhitravelvlog0407 No. But I have forwarded it to our Video Maker Department to create a video on it. You will get a notification once it is published by us.

Client

@@josealmeida1713 thx

No. Please update it on the Application server, Share point, and Citrix server. Let us know if you receive any errors. We will help you to fix it.

@@Accuwebhosting Thank you for kind suggestion

Yes. The steps mentioned in the video will be worked for Windows 10 64 bits. Please do not forget to restart your local system after applying all the steps.

Granand, Please find the answers to your queries. 1. Not updating to 1.2 -> As per the PCI compliance standard, If your website is accepting credit card payments then you will receive a warning message. 2. Update to 1.2 -> If you have enabled TLS 1.2 and disabled old protocol such as SSL 1.0, 2.0, TLS 1.0, and TLS 1.1 on your Application Server, you will not receive any error or issue while accepting the payment through credit card, Paypal account, Authorize.net, Stripe, UPS, FedEx, and many others. You check the TLS status of your website or server from the below url: www.ssllabs.com/ssltest/

@@Accuwebhosting Thank you very much

problem is when SSL is beign applied to applications. Im having connection issues with specific games because of that

@Nouwe Yvan, Thank you for sharing your valuable feedback. We will use the zoom feature in our next video. In the Run dialog box, you need to enter regedit in the Open field to open the Registry Editor window.

Karan, you should disable TLS 1 on your local system and check it again. By default, TLS 1.0 is enabled on your system. Registry path: HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols -> To disable the TLS 1.0 protocol, create an Enabled entry in the appropriate subkey. This entry does not exist in the registry by default. -> After you have created the entry, change the DWORD value to 0. To enable the protocol, change the DWORD value to 1. Important Note: Please don't forget to reboot the system after you apply the above solution. Please let us know if you still face the issue. We will help you to fix the issue.

Hello Swara, Thank you for reaching out to our video tutorial channel. Unfortunately, we do not have any kb article or video tutorial on the topic you refer to. However, we found one thread for that, and we have mentioned it below. We believe it will be helpful to you. support.microsoft.com/en-us/topic/support-for-tls-system-default-versions-included-in-the-net-framework-3-5-on-windows-8-1-and-windows-server-2012-r2-499ff5ef-a88a-128b-c639-ed038b7d2d5f

Jason, Thank you for choosing our video tutorial. Let me clarify a few things, What do you want to do? Do you want to enable TLS 1.2 on your Windows system? If yes, you need to create a TLS 1.2 key under the protocols section. We have mentioned all the steps in detail in the video tutorial. Please follow it. Regarding SSL version: -> By default SSL 2.0 is disabled by Microsoft. However, SSL 3.0 is enabled. You can check more details from the below URL: docs.microsoft.com/en-us/security/engineering/solving-tls1-problem If you want to disable old or weak versions of SSL and TLS on your windows system then follow the below video tutorial. ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-rRS6p_OhBss.html

@@Accuwebhosting my problem right now is that everyone I want to Google something it says "Err_Cert_Invalid" and my system is searching with TSL 1.0 I tried everything but I can't figure out what the problem is.

@@Jayy_Rayy Thank you for providing the error details. Since your system is searching for TLS 1.0, you should enable it on your system if it is disabled. Please follow the same process which we have mentioned in the Video tutorial (How to enable TLS 1.2 on Windows 10?). You just need to change the Key name from TLS 1.2 to TLS 1.0. The rest of the steps are the same. Important Note: Please do not forget to restart your system after applying all the steps mentioned in the video.

Okay. Let us know if you have any queries regarding any issues. We will happy to solve your issue.

@@Accuwebhosting thanks, stay blessed and safe

@Nouwe Yvan, Thank you for sharing your valuable feedback. We will use the zoom feature in our next video. In the Run dialog box, you need to enter regedit in the Open field to open the Registry Editor window.

Ritas, Sure. We are here to help you. Let me clarify, did you restart your system after applying all the steps mentioned in the above video? If no, please restart it and try again.

@@Accuwebhosting Hi and Thank You for responding back to me. I actually powered off, instead of restarting. I found another YT video shortly after that gave instructions with same issue as mine, and fixed my issue. I'm sure following your instructions was necessary aswell or it may not have worked otherwise. Appreciate the help.

Glad to know that It's worked for you :)

Zero Skills, We are glad to know that our video is very helpful to you. Please stay with us for more videos.

Had you rebooted your system after applying all the steps mentioned in the video? If yes, how do you identify it is not working? You can check the TLS version of your website or system from the below URL: www.ssllabs.com/ssltest/

Thanks

Amir Razzaq, Thank you for watching our video tutorial. In Windows Server 2016, TLS 1.2 is already enabled. You can check more details from the below URL: docs.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp- Let us know the error message which you are receiving so we can check and assist you accordingly.

To disable the TLS protocol, create an Enabled entry in the appropriate subkey. This entry does not exist in the registry by default. If it is already presented, then set its value to 0 and confirm changes. After don't forget to reboot the system. Please let us know if you face any issues. We will be happy to help you.

Michael, Had you rebooted your system after applying all the steps mentioned in the video? If no, please reboot it. You can check the TLS option whether it is enabled or not from the below URL www.ssllabs.com/ssltest/

Oktay, Are you facing any issue while enabling TLS 1.2 on your system or VPS? If yes, let us know so we can check and assist you. Also, do not forget to restart your system after applying the steps mentioned in the video. Your mentioned comment is incomplete.

@@Accuwebhosting I had no problem and restarted my computer. Thank you for your support.

@@OktayBozdemir You are welcome! Please stay with us for more videos.