TLS versions enabled

Question

Hi,

We have server 2019 and no key on: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

This means my server only can use TLS 1.2 ?

I need to be sure that my server rejects TLS 1.0 and TLS 1.1 connections.

Thanks,

Answer 1

No - it means that your server supports TLS 1.2.

To enforce TLS 1.2, follow https://learn.microsoft.com/en-us/answers/questions/1529587/disable-tls-1-0-1-1-windows-server-2019

Details at https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/demystifying-schannel/ba-p/259233

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin