6. Windows 7 enabling TLS 1.2

The following information has been taken from the Microsoft Support site. Click on the following link to view the full article:

 

Microsoft Support – Full technical article

 

Easy Fix

To add the DefaultSecureProtocols registry subkey automatically, click the Download button. In the File Download dialog box, click Run or Open, and then follow the steps in the easy fix wizard.

 

Notes:

 

  • This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.

  • If you are not on the computer that has the problem, save the easy fix solution to a flash drive or a CD and then run it on the computer that has the problem.

 

DOWNLOAD

 

Note: In addition to the DefaultSecureProtocols registry subkey, the Easy fix also adds the SecureProtocols at the following location to help enable TLS 1.1 and 1.2 for Internet Explorer.

 

The SecureProtocols registry entry that has value 0xA80 for enabling TLS 1.1 and 1.2 will be added in the following paths:

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

 

Enable TLS 1.2 on Windows 7 at the SChannel component level

 

Per the TLS-SSL Settings article, for TLS 1.2 to be enabled and negotiated on Windows 7, you MUST create the "DisabledByDefault" entry in the appropriate subkey (Client) and set it to "0". This subkey will not be created in the registry since these protocols are disabled by default.

 

Create the necessary subkey for TLS 1.2; create the DisabledByDefault DWORD values and set it to 0 in the following locations:

FOR TLS 1.1

Registry location:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client

DWORD name: DisabledByDefault

DWORD value: 0

FOR TLS 1.2

Registry location:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client

DWORD name: DisabledByDefault

DWORD value: 0

 

SECTION CONTENTS

BACK TO MAIN