Share via

Verify TLS 1.2

altima 21 Reputation points
2020-07-29T18:54:47.223+00:00

Hi All,

How can I verify Tls 1.2 is enabled on all computer across the organization? I do have a GPO but I don't think it applies to all, is there a report or something I can run to verify tls 1.2 is enabled?

Thanks

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,923 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Leon Laude 85,811 Reputation points
    2020-07-29T19:07:56.237+00:00

    Hi,

    TLS 1.2 is enabled by default on Windows 10, version 1507+ and Windows Server 2012+.

    Protocols in TLS/SSL (Schannel SSP)
    https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-

    If you want to verify this, the easiest would be to create a PowerShell script that checks the Windows registry setting over here:

    • HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

    https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings#tls-12

    Best regards,
    Leon

  2. Ian Xue 37,536 Reputation points Microsoft Vendor
    2020-07-31T01:22:03.3+00:00

    Hi,

    You could either enable tls 1.2 in internet options - advanced or registry. You may refer to this article
    https://www.kapilarya.com/how-to-configure-tls-settings-in-windows-10

    Best Regards,
    Ian

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.