i have a question to fix a vulnerability that show the scann

CAMPOS Andres 1 Reputation point
2022-03-02T04:23:02.543+00:00

How Disable TLS/SSL support for 3DES cipher suite in windows 10?
the following recommended configuration provides a higher level of security. This configuration is compatible with Firefox 27, Chrome 22, IE 11, Opera 14 and Safari 7. SSLv2, SSLv3, and TLSv1 protocols are not recommended in this configuration. Instead, use TLSv1.1 and TLSv1.2 protocols.

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Yi E Wang 646 Reputation points
    2022-03-16T06:58:42.077+00:00

    Hi,

    Please check below steps:

    1. Open PowerShell with admin permission, and type cmdlet “Get-TlsCipherSuite –name DES” to gets the TLS cipher suites.
    2. Check the Name section of the cmdlet result.
    3. Navigate to below registry location and delete the entry same as step 2:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002\Functions
    4. Restart system and make the change take effect.

    Reference below link for detail information:
    https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/manage-ssl-protocols-in-ad-fs#enabling-or-disabling-additional-cipher-suites

    Best Regards,
    Eve Wang


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.