Posts Tagged “SSL 3.0”

To have SSL 3.0 on a windows server, you will first needs to disable the other protocols running. Normally this means disabling SSL 2.0, which is outdated and is suggested that you disable if you are trying to lock down your windows server or have been told so via a security scan.

To disable SSL 2.0:
1. Click Start, click Run, type regedt32 or type regedit, and then click OK.
2. In Registry Editor, locate the following registry key:

HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders \SCHANNEL\Protocols\SSL 2.0\Server
3. On the Edit menu, click Add Value.
4. In the Data Type list, click DWORD.
5. In the Value Name box, type Enabled, and then click OK.

*Note* If this value is present, double-click the value to edit its current value

6. Type 00000000 in Binary Editor to set the value of the new key equal to “0″.
7. Click OK. Restart the computer.

You may find that you also need to disable PCT 1.0 as well, but by default this not installed in Windows.

1.     Click Start, click Run, type regedt32 or type regedit, and then click OK.
2.     In Registry Editor, locate the following registry key: HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders \SCHANNEL\Protocols\PCT 1.0\Server
3.     On the Edit menu, click Add Value.
4.     In the Data Type list, click DWORD.
5.     In the Value Name box, type Enabled, and then click OK.

Note If this value is present, double-click the value to edit its current value.

6.     Type 00000000 in Binary Editor to set the value of the new key equal to “0″.
7.     Click OK. Restart the computer.

Tags: ,

Comments 1 Comment »