Windows server 2022 TLS 1.3

Question

I want to remove all old TLS versions and use only TLS 1.3
I disabled TLS 1.0 , 1.2 , 1.1 and ciphers that support them but when checking with Wireshark it still using the bot of versions 1.2 and 1.3
Can somebody tell me is it possible if yes, how can i do
Thanks in advance!
P.S
I'm using windows server 2022

Answer 1

Hi,

Based on my research, there are 2 situations when the TLS was disabled:

Disabled by default: unless the SSPI caller explicitly requests this protocol version using the deprecated SCHANNEL_CRED structure, Schannel SSP will not negotiate this protocol version.

Disabled: Schannel SSP will not negotiate this protocol version regardless of the settings the SSPI caller may specify.

They can be defined due to your requirements:
https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings

Best Regards,

Answer 2

Hi，

Try to set the value as the following screenshot showing to disable the the TLS 1.2.