SSL Cipher Query - Windows Server 2012 R2

MClearns 1 Reputation point
2020-12-29T15:33:23.857+00:00

Hello,

I host a Windows 2012 r2 Server & Windows 2016 Server and looking for some help with respect to SSL ciphers.

Below are 2 ciphers for which I have a question:

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e) DH 2048 bits FS 128
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f) DH 2048 bits FS 256

Why is the stronger form not in Windows Server 2012R2? Is there any way or patch available for windows 2012r2 which can be installed so that we can have these ciphers available in the server to be enabled/disabled.

52034-image.png

52014-image.png

ASP.NET Core
ASP.NET Core
A set of technologies in the .NET Framework for building web applications and XML web services.
4,191 questions
Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,381 questions
Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,532 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2020-12-29T15:39:39.837+00:00

    You can follow along here to add them.
    https://www.howtogeek.com/221080/how-to-update-your-windows-server-cipher-suite-for-better-security/

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments
  2. Dale Kudusi 3,211 Reputation points
    2020-12-30T09:24:18.097+00:00

    Hi,
    Check out the article below describes an update in which new TLS cipher suites are added and cipher suite priorities are changed in Windows Server 2012 R2：
    https://support.microsoft.com/en-us/help/2929781/update-adds-new-tls-cipher-suites-and-changes-cipher-suite-priorities

    **
    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments