Posted on by harlan

MICROSOFT IIS: HOW TO DISABLE THE SSL V3 PROTOCOL

  1. Open the Registry Editor and run it as administrator.For example, in Windows 2012 or 2008r2:
    1. On the Start screen type regedit.exe.
    2. Right-click on regedit.exe and click Run as administrator.
  2. In the Registry Editor window, go to:HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSchannelProtocols
  4. In the navigation tree, right-click on Protocols, and in the pop-up menu, click New > Key.
  6. Name the key, SSL 3.0.
  7. In the navigation tree, right-click on the new SSL 3.0 key that you just created, and in the pop-up menu, click New > Key.
  9. Name the key, Client.
  10. In the navigation tree, right-click on the new SSL 3.0 key again, and in the pop-up menu, click New > Key.
  12. Name the key, Server.
  13. In the navigation tree, under SSL 3.0, right-click on Client, and in the pop-up menu, click New > DWORD (32-bit) Value.
  15. Name the value DisabledByDefault.
  16. In the navigation tree, under SSL 3.0, select Client and then, in the right pane, double-click the DisabledByDefault DWORD value.
  18. In the Edit DWORD (32-bit) Value window, in the Value Data box change the value to 1 and then, click OK.
  19. In the navigation tree, under SSL 3.0, right-click on Server, and in the pop-up menu, click New > DWORD (32-bit) Value.
  21. Name the value Enabled.
  22. In the navigation tree, under SSL 3.0, select Server and then, in the right pane, double-click the Enabled DWORD value.
  24. In the Edit DWORD (32-bit) Value window, in the Value Data box leave the value at 0 and then, click OK.
  25. Restart the server.
  26. You have successfully disabled the SSL v3 protocol.

Leave a Reply

Your email address will not be published. Required fields are marked *