When HTTPS is implemented on IIS which cryptographic modules does IIS use

Question

When HTTPS is implemented on IIS which cryptographic modules does IIS use?

Which providers and modules does IIS use for HTTPS connections?

On Windows Server 2016 or higher.

Answer 1

Hi @venkatesh_vsa ,

if the server is FIPS compliant and policies are configured then the OS is already configured if not you will have enable the policy for that - system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing

However the detailed CM is validated for Windows Server 2016 and certificate of that module is over here 2937

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

@JimmySalian-2011 , Thank you for your answer.
Does IIS use "Cryptographic Module" only when HTTPS is enabled, which module does it use when HTTPS is not enabled?