Windows server: How TLS 1.2 disable and use only TLS 1.3

Question

I want to remove all old TLS versions and use only TLS 1.3
I disabled TLS 1.0 , 1.2 , 1.1 and ciphers that support them but when checking with Wireshark it still using the bot of versions 1.2 and 1.3
Can somebody tell me is it possible if yes, how can i do
Thanks in advance!
P.S
I'm using windows server 2022

Answer 1

Hello @Albert Ashkhatoyan ,

Thank you for your patience.

I have done a test in my lab (Windows server 2016), I have had the same result as you.

1.Disable TLS 1.2 on server 2016.

2.Access the following three web sites.

Use TLS 1.2

Use TLS 1.3

Use TLS 1.3

After my further, it seems you should disable TLS 1.2 on both system wide and browser wide, and then check if it helps.

I only find Windows 10 instead of Windows server below for your references.

How To Enable Or Disable TLS 1.3 In Windows 10
https://www.itechtics.com/tls-1-3/

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Hope the information above is helpful to you.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hello @Albert Ashkhatoyan ,

Thank you for posting here.

Based on the description "I disabled TLS 1.0 , 1.2 , 1.1 and ciphers that support them but when checking with Wireshark it still using the bot of versions 1.2 and 1.3", please check if you have disabled all old TLS versions (such as TLS 1.0 , 1.1 , 1.2) successfully.

For how to disable TLS 1.0 , 1.1 and 1.2, please refer to link below.

Managing SSL/TLS Protocols and Cipher Suites for AD FS
https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/manage-ssl-protocols-in-ad-fs

Tip: Before disable all old TLS versions (such as TLS 1.0 , 1.1 , 1.2) , you should check that all operating systems and applications support TLS 1.3.

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.