Disabling support for Medium Strength Cipher Suites

Anonymous
2023-12-05T12:37:05+00:00

Do we have a list of weak to medium strength cipher suites, and how do we remove support for these in the registry?

Windows for business | Windows Server | Networking | Network connectivity and file sharing

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2023-12-06T03:13:43+00:00

    Hello,

    Different versions of Windows prefer different TLS cipher suites in a specific order. Check the Windows version you're using to find out how the Microsoft Schannel Provider selects them by default.

    Cipher Suites in TLS/SSL (Schannel SSP) - Win32 apps | Microsoft Learn

    TLS Cipher Suites in Windows 11 v22H2. - Win32 apps | Microsoft Learn

    To diable insecure cipher, you could refer to the link: Correct way to disable insecure cipher? - Windows Server (spiceworks.com)

    Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

    Regards,

    Karlie

    0 comments No comments