Welcome to the Windows Hardening Interface



ReferenceND
Typemachine
Number of policies65

Search a policy
# Apply Mode Name Severity UIX impact Default Value Recommended Value
Filter

Schannel: TLS Settings: Protocols

1000 Server: Multi-Protocol Unified Hello High Not defined 0

Server: Multi-Protocol Unified Hello


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Enabled' -value 0


More Informations


1001 Server: Multi-Protocol Unified Hello (Disabledbydefault) High Not defined 1

Server: Multi-Protocol Unified Hello (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Disabledbydefault' -value 1


More Informations


1002 Client: Multi-Protocol Unified Hello High Not defined 0

Client: Multi-Protocol Unified Hello


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Enabled' -value 0


More Informations


1003 Client: Multi-Protocol Unified Hello (Disabledbydefault) High Not defined 1

Client: Multi-Protocol Unified Hello (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server' -name 'Disabledbydefault' -value 1


More Informations


1004 Server: PCT High Not defined 0

Server: PCT


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server' -name 'Enabled' -value 0


More Informations


1005 Server: PCT (Disabledbydefault) High Not defined 1

Server: PCT (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server' -name 'Disabledbydefault' -value 1


More Informations


1006 Client: PCT High Not defined 0

Client: PCT


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client' -name 'Enabled' -value 0


More Informations


1007 Client: PCT (Disabledbydefault) High Not defined 1

Client: PCT (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client' -name 'Disabledbydefault' -value 1


More Informations


1008 Server: SSLv2.0 High Not defined 0

Server: SSLv2.0


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server' -name 'Enabled' -value 0


More Informations


1009 Server: SSLv2.0 (Disabledbydefault) High Not defined 1

Server: SSLv2.0 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server' -name 'Disabledbydefault' -value 1


More Informations


1010 Client: SSLv2.0 High Not defined 0

Client: SSLv2.0


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client' -name 'Enabled' -value 0


More Informations


1011 Client: SSLv2.0 (Disabledbydefault) High Not defined 1

Client: SSLv2.0 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client' -name 'Disabledbydefault' -value 1


More Informations


1012 Server: SSLv3.0 High Not defined 0

Server: SSLv3.0


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server' -name 'Enabled' -value 0


More Informations


1013 Server: SSLv3.0 (Disabledbydefault) High Not defined 1

Server: SSLv3.0 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server' -name 'Disabledbydefault' -value 1


More Informations


1014 Client: SSLv3.0 High Not defined 0

Client: SSLv3.0


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client' -name 'Enabled' -value 0


More Informations


1015 Client: SSLv3.0 (Disabledbydefault) High Not defined 1

Client: SSLv3.0 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client' -name 'Disabledbydefault' -value 1


More Informations


1016 Server: TLSv1.0 Medium Not defined 0

Server: TLSv1.0


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server' -name 'Enabled' -value 0


More Informations


1017 Server: TLSv1.0 (Disabledbydefault) Medium Not defined 1

Server: TLSv1.0 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server' -name 'Disabledbydefault' -value 1


More Informations


1018 Client: TLSv1.0 Medium Not defined 0

Client: TLSv1.0


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client' -name 'Enabled' -value 0


More Informations


1019 Client: TLSv1.0 (Disabledbydefault) Medium Not defined 1

Client: TLSv1.0 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client' -name 'Disabledbydefault' -value 1


More Informations


1020 Server: TLSv1.1 Medium Not defined 0

Server: TLSv1.1


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server' -name 'Enabled' -value 0


More Informations


1021 Server: TLSv1.1 (Disabledbydefault) Medium Not defined 1

Server: TLSv1.1 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server' -name 'Disabledbydefault' -value 1


More Informations


1022 Client: TLSv1.1 Medium Not defined 0

Client: TLSv1.1


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client' -name 'Enabled' -value 0


More Informations


1023 Client: TLSv1.1 (Disabledbydefault) Medium Not defined 1

Client: TLSv1.1 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client' -name 'Disabledbydefault' -value 1


More Informations


1024 Server: TLSv1.2 Medium Not defined 4294967295

Server: TLSv1.2


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -name 'Enabled' -value 4294967295


More Informations


1025 Server: TLSv1.2 (Disabledbydefault) Medium Not defined 0

Server: TLSv1.2 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -name 'Disabledbydefault' -value 0


More Informations


1026 Client: TLSv1.2 Medium Not defined 4294967295

Client: TLSv1.2


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -name 'Enabled' -value 4294967295


More Informations


1027 Client: TLSv1.2 (Disabledbydefault) Medium Not defined 0

Client: TLSv1.2 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -name 'Disabledbydefault' -value 0


More Informations


1060 Server: TLSv1.3 Medium Not defined 0

Server: TLSv1.3


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server' -name 'Enabled' -value 0


More Informations


1061 Server: TLSv1.3 (Disabledbydefault) Medium Not defined 1

Server: TLSv1.3 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server' -name 'Disabledbydefault' -value 1


More Informations


1062 Client: TLSv1.3 Medium Not defined 0

Client: TLSv1.3


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client' -name 'Enabled' -value 0


More Informations


1063 Client: TLSv1.3 (Disabledbydefault) Medium Not defined 1

Client: TLSv1.3 (Disabledbydefault)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client
RegistryItem :
Disabledbydefault

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client' -name 'Disabledbydefault'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client' -name 'Disabledbydefault' -value 1


More Informations


Schannel: TLS Settings: Chipers

1028 NULL High Not defined 0

NULL


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL' -name 'Enabled' -value 0


More Informations


1029 DES 56/56 High Not defined 0

DES 56/56


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56' -name 'Enabled' -value 0


More Informations


1030 RC2 40/128 High Not defined 0

RC2 40/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128' -name 'Enabled' -value 0


More Informations


1031 RC2 56/128 High Not defined 0

RC2 56/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128' -name 'Enabled' -value 0


More Informations


1032 RC2 128/128 High Not defined 0

RC2 128/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128' -name 'Enabled' -value 0


More Informations


1033 RC4 40/128 High Not defined 0

RC4 40/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128' -name 'Enabled' -value 0


More Informations


1034 RC4 56/128 High Not defined 0

RC4 56/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128' -name 'Enabled' -value 0


More Informations


1035 RC4 64/128 High Not defined 0

RC4 64/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128' -name 'Enabled' -value 0


More Informations


1036 RC4 128/128 High Not defined 0

RC4 128/128


Introduction


Read more >

Relevance indicator

25

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128' -name 'Enabled' -value 0


More Informations


1037 Triple DES 168 Medium Not defined 0

Triple DES 168


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168' -name 'Enabled' -value 0


More Informations


1038 AES 128/128 Medium Not defined 4294967295

AES 128/128


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128' -name 'Enabled' -value 4294967295


More Informations


1039 AES 256/256 Medium Not defined 4294967295

AES 256/256


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256' -name 'Enabled' -value 4294967295


More Informations


Administrative Templates: Network

1064 SSL Configuration Settings: SSL Cipher Suite Order Medium Not defined TLS_CHACHA20_POLY1305_SHA256,
TLS_AES_256_GCM_SHA384,
TLS_AES_128_GCM_SHA256,
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

SSL Configuration Settings: SSL Cipher Suite Order


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002
RegistryItem :
Functions

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002' -name 'Functions'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002' -name 'Functions' -value TLS_CHACHA20_POLY1305_SHA256,TLS_AES_256_GCM_SHA384,TLS_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA


More Informations


1065 SSL Configuration Settings: ECC Curve Order Medium Not defined Curve25519 NistP384 NistP256

SSL Configuration Settings: ECC Curve Order


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002
RegistryItem :
EccCurves

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002' -name 'EccCurves'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002' -name 'EccCurves' -value Curve25519 NistP384 NistP256


More Informations


Schannel: TLS Settings: Hashes

1041 MD5 Medium Not defined 0

MD5


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5' -name 'Enabled' -value 0


More Informations


1042 SHA-1 Medium Not defined 0

SHA-1


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA' -name 'Enabled' -value 0


More Informations


1043 SHA-256 Medium Not defined 4294967295

SHA-256


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA256
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA256' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA256' -name 'Enabled' -value 4294967295


More Informations


1044 SHA-384 Medium Not defined 4294967295

SHA-384


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA384
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA384' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA384' -name 'Enabled' -value 4294967295


More Informations


1045 SHA-512 Medium Not defined 4294967295

SHA-512


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA512
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA512' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA512' -name 'Enabled' -value 4294967295


More Informations


Schannel: TLS Settings: KeyExchangeAlgorithms

1046 Diffie-Hellman Medium Not defined 4294967295

Diffie-Hellman


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman' -name 'Enabled' -value 4294967295


More Informations


1047 Diffie-Hellman (ServerMinKeyBitLength) Medium Not defined 2048

Diffie-Hellman (ServerMinKeyBitLength)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman
RegistryItem :
ServerMinKeyBitLength

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman' -name 'ServerMinKeyBitLength'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman' -name 'ServerMinKeyBitLength' -value 2048


More Informations


1048 Diffie-Hellman (ClientMinKeyBitLength) Medium Not defined 2048

Diffie-Hellman (ClientMinKeyBitLength)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman
RegistryItem :
ClientMinKeyBitLength

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman' -name 'ClientMinKeyBitLength'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman' -name 'ClientMinKeyBitLength' -value 2048


More Informations


1049 ECDH Medium Not defined 4294967295

ECDH


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH' -name 'Enabled' -value 4294967295


More Informations


1050 PKCS Medium Not defined 4294967295

PKCS


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS
RegistryItem :
Enabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS' -name 'Enabled'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS' -name 'Enabled' -value 4294967295


More Informations


1051 PKCS (ServerMinKeyBitLength) Medium Not defined 2048

PKCS (ServerMinKeyBitLength)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS
RegistryItem :
ClientMinKeyBitLength

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS' -name 'ClientMinKeyBitLength'
Set Value :
Set-ItemProperty -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS' -name 'ClientMinKeyBitLength' -value 2048


More Informations


.NET Framework: TLS Settings

1052 Use System Default TLS Versions (v2.0.50727, 32bit) Medium Not defined 1

Use System Default TLS Versions (v2.0.50727, 32bit)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727
RegistryItem :
SystemDefaultTlsVersions

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727' -name 'SystemDefaultTlsVersions'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727' -name 'SystemDefaultTlsVersions' -value 1


More Informations


1053 Use Strong Crypto (v2.0.50727, 32bit) Medium Not defined 1

Use Strong Crypto (v2.0.50727, 32bit)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727
RegistryItem :
SchUseStrongCrypto

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727' -name 'SchUseStrongCrypto'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727' -name 'SchUseStrongCrypto' -value 1


More Informations


1054 Use System Default TLS Versions (v2.0.50727) Medium Not defined 1

Use System Default TLS Versions (v2.0.50727)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727
RegistryItem :
SystemDefaultTlsVersions

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727' -name 'SystemDefaultTlsVersions'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727' -name 'SystemDefaultTlsVersions' -value 1


More Informations


1055 Use Strong Crypto (v2.0.50727) Medium Not defined 1

Use Strong Crypto (v2.0.50727)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727
RegistryItem :
SchUseStrongCrypto

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727' -name 'SchUseStrongCrypto'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727' -name 'SchUseStrongCrypto' -value 1


More Informations


1056 Use System Default TLS Versions (v4.0.30319, 32bit) Medium Not defined 1

Use System Default TLS Versions (v4.0.30319, 32bit)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
RegistryItem :
SystemDefaultTlsVersions

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319' -name 'SystemDefaultTlsVersions'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319' -name 'SystemDefaultTlsVersions' -value 1


More Informations


1057 Use Strong Crypto (v4.0.30319, 32bit) Medium Not defined 1

Use Strong Crypto (v4.0.30319, 32bit)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
RegistryItem :
SchUseStrongCrypto

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319' -name 'SchUseStrongCrypto'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319' -name 'SchUseStrongCrypto' -value 1


More Informations


1058 Use System Default TLS Versions (v4.0.30319) Medium Not defined 1

Use System Default TLS Versions (v4.0.30319)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
RegistryItem :
SystemDefaultTlsVersions

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -name 'SystemDefaultTlsVersions'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -name 'SystemDefaultTlsVersions' -value 1


More Informations


1059 Use Strong Crypto (v4.0.30319) Medium Not defined 1

Use Strong Crypto (v4.0.30319)


Introduction


Read more >

Relevance indicator

0

Table of settings


UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
RegistryItem :
SchUseStrongCrypto

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -name 'SchUseStrongCrypto'
Set Value :
Set-ItemProperty -path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -name 'SchUseStrongCrypto' -value 1


More Informations