Disabling SSL 2.0 and 3.0 on IIS 6

1. Open up “regedit” from the command line
2. Browse to the following key:
   HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
3. Create a new REG_DWORD called “Enabled” and set the value to 0
4. You will need to restart the computer for this change to take effect. (you can wait on this if you also need to disable the ciphers)

Refaire la manip pour SSL3.0

Disable unsecure encryption ciphers less than 128bit

1. Open up “regedit” from the command line
2. Browse to the following key:
   HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56
3. Create a new REG_DWORD called “Enabled” and set the value to 0
4. Browse to the following key:
   HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128
5. Create a new REG_DWORD called “Enabled” and set the value to 0
6. Browse to the following key:
   HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128
7. Create a new REG_DWORD called “Enabled” and set the value to 0
8. Browse to the following key:
   HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128
9. Create a new REG_DWORD called “Enabled” and set the value to 0
10. You will need to restart the computer for this change to take effect.

Please follow and like us: