Windows Server - How to Enable TLS 1.2 Registry Script (Disable TLS 1.0, 1.1, RC4, SSL 2.0, 3.0, DH) 

Reboot is Required by the way. Check the Description Area for the Registry Script.

Thank you!!! Just what I was looking for. Just did my server and went from score of F to A. You ROCK sir!

From an F to an A on SSL Labs. Bless you.

Worked for me, super easy and after rebooting and retesting using the SSLLabs tool, my score went from "F" to "B", yea team!! Thank you, CodeCowboyOrg...

Funziona benissimo è stato veramente utile ho risolto tutti i problemi grazie!

Excellent Video and all script links very handy- Thanks Mate!

Excellent script and video, thank you!

It actually works!

Thanks so much, very helpful :-)

Thank you, it worked great :-)

Thank you for the explanation and script, works great for Windows, do you have a similar fix for a Linux/Unix box?

do we need to restart the server itself after the run of the script?

I have successfully achieve A, but unable to send emails through SQL after running the script.

would this work on a exchange 2010 on Server 2008 R2?

Fantastic video, but I'm not entirely clear on a few points and I hope you can clear up my confusion. [1] When I look at my own 2012 servers I see 'Server' but not 'Client' registry keys in the registry location in question. Are both absolutely required or just the 'Server' entries? I'm not really sure what the point of the client entries are. [2] My disabled protocols (SSL 3.0 for example) simply show the 'Enabled' DWORD set to 0, but no 'DisabledByDefault' DWORD. Is the disabled DWORD entry best practice, required, or optional? If required, then I suspect my server may be supporting protocols I don't want, but if optional then I don't get why you'd put it in at all. [3] Your script doesn't have anything in it to disable TLS 1.0 despite having been released in May 2018. I believe you said this was to provide compatibility with older browsers, but from what I understand TLS 1.0 should pretty much be turned off on all servers across the board at this point, correct? Anyway, thanks in advance for the help.

Do you have an updated script (link is broken) and with updated Ciphers...

It work for iis6 ?? Plz help

Hi, My 2012R2 server box. Under TLS1.2>Server>NAME: Enabled TYPE: REG_DWORD, DATA: 0Xffffffff(4294967295) instead of DATA: 0x00000001(1)? What is the difference between DATA: 0Xffffffff(4294967295) vs DATA: 0x00000001(1)?

Hi all Is anyone can help me here if i disable TLS 1.0 and enable TLS 1.1 and 1.2 then my crystal reports is not working

Why are enabling RC4 - RC4 is deprecated. You then say you are disabling them yet the script says RC4 enabled???

This disables RDP on Windows 2016. Be careful.

Does this work for Windows server 2012 r2?

does it work on windows 2003 server

Hi can you share me script to disable TLS 1.0 AND TLS 1.1

GX40 Official is a very trusted provider of scam tools

will this work on server 2008 r2?