In order to disable SSL 2.0 in IIS 7 and make sure that the stronger SSL 3.0 ot TLS 1.0 is used, follow these instructions:
1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate the following registry key/folder:
HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0
3. Right-click on the SSL 2.0 folder and select New and then click Key. Name the new folder Server.
4. Inside the Server folder, click the Edit menu, select New, and click DWORD (32-bit) Value.
5. Enter Enabled as the name and hit Enter.
6. Ensure that it shows 0×00000000 (0) under the Data column (it should by default). If it doesn’t, right-click and select Modify and enter 0 as the Value data.
7. Restart the computer.
8. Verify that no SSL 2.0 ciphers are available at ServerSniff.net
For more information regarding this process, please visit the following – http://support.microsoft.com/kb/187498
Entries (RSS)