Schannel 36871 and 36874 error

Question

Hi Support,

We have several servers have Schannel 36871 and 36874 errors. Seems this is related to TLS 1.2 and we can enable it by registry in Server side.

But which registry key can fix this problem?

https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-server

https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings

Thanks

Answer 1

Hello Chong,

Thank you for posting in Q&A forum.

You can configure the registry on one server and check if it helps.

HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server

Create a DWORD registry value named "Enabled" with an entry value of "1" under the corresponding version-specific subkey.

Name: Enabled
Type: REG_DWORD
Data: 1 (enabled) or 0 （disabled）

For more information, please refer to link below.
https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-12

Note: please back up the registry before you change it.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.