Advertisement
MertcanGokgoz

Disable known weak cryptographic protocols

Dec 20th, 2018
259
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <#
  2. .SYNOPSIS
  3.     Disable known weak cryptographic protocols
  4. .NOTES    
  5.     Instructs Schannel to disable known weak cryptographic algorithms, cipher suites, and SSL/TLS protocol versions that may be otherwise enabled for better interoperability.
  6.     In .Net framework 4.5.2 and below, if strong cryptography is not set, SSL 3.0 or TLS 1.0 will be used by default.
  7.     For .Net 4.6.1 strong cryptography is enabled by default, meaning that secure HTTP communications will use TLS 1.0, TLS 1.1 or TLS 1.2.
  8. #>  
  9.  
  10.  
  11. # set strong cryptography on 64 bit .Net Framework
  12. Set-ItemProperty -Path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NetFramework\v4.0.30319' -Name 'SchUseStrongCrypto' -Value '1' -Type DWord
  13.  
  14.  
  15. # set strong cryptography on 32 bit .Net Framework
  16. Set-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\.NetFramework\v4.0.30319' -Name 'SchUseStrongCrypto' -Value '1' -Type DWord
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement