IIS 7.5: HOW TO ENABLE TLS 1.1 AND TLS 1.2

最新推荐文章于 2022-07-24 13:58:02 发布

weixin_33825683

最新推荐文章于 2022-07-24 13:58:02 发布

阅读量219

点赞数

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/time-is-life/p/8184843.html

本文介绍如何在 IIS 7.5 上配置 TLS 1.1 和 TLS 1.2，并禁用不安全的 SSL 3.0 协议。通过修改注册表设置可以实现这些配置变更，重启服务器后 IIS 将支持 TLS 1.2 连接。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

In IIS 7.5, which is installed on Windows 2008 R2 servers, only SSL 3.0 and TLS 1.0 are enabled for HTTPS encryption by default. To enable TLS 1.1 and TLS 1.2 and disable the insecure SSL 3.0 protocol, add the following keys to the Registry of the server:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server]

"Enabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:ffffffff

After a reboot, IIS should be accepting TLS 1.2 connections.