Hello, I install a service in window 2012 R12, and this service will access our backend service protected by SSL. Unfortunatelly, for some security reason, this backend service only support ssl chiper suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 But it seems window server 2012 R2 does not support those chiper suite, any way to add them?

You can follow along here. https://www.howtogeek.com/221080/how-to-update-your-windows-server-cipher-suite-for-better-security/ --please don't forget to Accept as answer if the reply is helpful--

Hi, Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance. Best Regards, Vicky

Add Chiper Suite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for Window 2012 R12

Accepted answer

Anonymous

2020-12-15T14:26:38.143+00:00

You can follow along here.
https://www.howtogeek.com/221080/how-to-update-your-windows-server-cipher-suite-for-better-security/

--please don't forget to Accept as answer if the reply is helpful--
Please sign in to rate this answer.

1 person found this answer helpful.
Qianbiao NG 1 Reputation point

2020-12-26T13:17:42.13+00:00

Sorry being late, It seems the solution has none effect. After adding those chiper suite, the error still occurs when using System.Net.HttpClient to access REST API.

Qianbiao NG 1 Reputation point

2020-12-26T14:06:44.95+00:00

oh, it needs a reboot to take effect. And finally, it works. Thanks.

And another question, is there a method to set chiper suite through command line? or programic way. We need to add it the installation script.

Anonymous

2020-12-26T14:09:51.63+00:00

You're welcome, glad to hear it helps.

--please don't forget to Accept as answer if the reply is helpful--

Qianbiao NG 1 Reputation point

2020-12-26T14:12:30.97+00:00

did not see the accept button. where is it.

And, is there a method to set chiper suite through command line or programic way. We need to add it the installation script.

QianBiao NG 31 Reputation points

2020-12-26T14:14:58.57+00:00

aha, I am login with a wrong account, so accept button is not shown.

KeithKirkland-4965 1 Reputation point

2024-04-30T14:24:50.6566667+00:00

I've followed the steps outlined in the article link above for our instance of Windows Server 2012 R2 and the ciphers listed in the original question above appear to be listed correctly in the gpedit interface but remain unused when doing test calls to an api end point. Other threads recommend using "Enable-TlsCipherSuite" powershell command, however that command is unavailable for Windows 2012 R2 even after upgrading to PowerShell 5.1. Users here and elsewhere claim that it works while others claim that it isn't possible because even though all of the pieces to make a request using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
are present, the OS doesn't support it. I would love to get a definitive answer to this.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Add Chiper Suite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for Window 2012 R12

1 additional answer

Your answer