Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Removing 3DES ciphers from SCHANNEL

$
0
0

Hi,

I am trying to remove all SSL cipher suites aside from RC4 in SCHANNEL using the registry keys mentioned in this KB support.microsoft.com/kb/245030/en-us.

After restarting the server, most of the cipher suites are removed aside from RC4 (as needed) and 3DES (TLS_RSA_WITH_3DES_EDE_CBC_SHA).

Any idea why 3DES keeps appearing in SSL scans despite adding this key? It happens both on win2012 and win2008 R2.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168]
"Enabled"=dword:00000000

Thanks,

Oren


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>