Ssl – How to disable SSLv2 or SSLv3

iis-7.5ssl

Anyone know how to disable certain SSL versions and only enable others in IIS 7.5?

Best Answer

  1. Open regedit
  2. Navigate to, or create the keys as necessary:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
    
  3. Create/Edit the value Enabled, type DWORD, value "0"

  4. Reboot

Notes: The same proceedure applied to key names PCT 1.0, SSL 2.0, SSL 3.0, TLS 1.0. In newer versions of Windows some of these are disabled by default - which depends on what version.

Reference: http://support.microsoft.com/kb/187498