Scribd Logo
Upload

Welcome to Scribd!

  • TLS 1.0 TLS 1.1 Remediation

    Uploaded by

    mario hurtado
    10 views2 pages
    The document discusses changes made to the Windows registry to disable insecure and older TLS/SSL ciphers and protocols. Specific registry keys are modified to disable RC4, 3DES and TLS 1.0/1.1, and additional registry settings are added to address Windows speculative execution issues.

    Original Description:

    Original Title

    TLS 1.0 TLS 1.1 remediation

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses changes made to the Windows registry to disable insecure and older TLS/SSL ciphers and protocols. Specific registry keys are modified to disable RC4, 3DES and TLS 1.0/1.1, and additional registry settings are added to address Windows speculative execution issues.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    10 views2 pages

    TLS 1.0 TLS 1.1 Remediation

    Uploaded by

    mario hurtado
    The document discusses changes made to the Windows registry to disable insecure and older TLS/SSL ciphers and protocols. Specific registry keys are modified to disable RC4, 3DES and TLS 1.0/1.1, and additional registry settings are added to address Windows speculative execution issues.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 2

    42873 – SSL Medium Strength Cipher Suites Supported (SWEET32)

    Disabled unsecure DES, 3DES & RC4 Ciphers in Registry

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128]
    "Enabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]
    "Enabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]
    "Enabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168]


    "Enabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168]


    "Enabled"=dword:00000000

    104743 – TLS Version 1.0 Protocol Detection

    Disabled TLS 1.0 in Registry

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client]
    "Enabled"=dword:00000000
    "DisabledByDefault"=dword:00000001

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]
    "Enabled"=dword:00000000
    "DisabledByDefault"=dword:00000001

    121010 – TLS Version 1.1 Protocol Detection

    Disabled TLS 1.1 in Registry

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
    "Enabled"=dword:00000000
    "DisabledByDefault"=dword:00000001

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\
    TLS 1.1\Server]
    "Enabled"=dword:00000000
    "DisabledByDefault"=dword:00000001
    Windows Speculative Execution Configuration Check

    Fix with Registry

    New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management' -Name


    'FeatureSettingsOverrideMask' `
    -Value '0x00000003' -PropertyType 'Dword' -Force

    New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management' -Name


    'FeatureSettingsOverride' `
    -Value '0x00000048' -PropertyType 'Dword' -Force

    You might also like