Skip Ribbon Commands
Skip to main content

Xadean's Empirical Musing

:

Top Link Bar

Quick Launch
Xadean's Empirical Musing > Posts > Enable TLS 1.1 & 1.2 as Default Secure Protocols in WinHTTP
May 28
Enable TLS 1.1 & 1.2 as Default Secure Protocols in WinHTTP
by  Xadean Q. AhmasiNo presence information  on 5/28/2018 1:36 PM

Reference Links:

https://www.admin-enclave.com/en/articles/windows/402-enable-tls-1-1-and-tls-1-2-as-a-default-secure-protocols-in-winhttp.html

https://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-a-default-secure-protocols-in

 

The setting in the graphic is INCORRECT (this setting enables TLS 1.0, 1.1, and 1.2).  The CORRECT setting is 0x00000a00 (2560), which is Hex 0200 + Hex 0800 to enable TLS 1.1 & 1.2.

 

The registry value is a DWORD bitmap. The value to use is determined by adding the values corresponding to the protocols desired. 

DefaultSecureProtocols Value

Protocol enabled

0x00000008

Enable SSL 2.0 by default

0x00000020

Enable SSL 3.0 by default

0x00000080

Enable TLS 1.0 by default

0x00000200

Enable TLS 1.1 by default

0x00000800

Enable TLS 1.2 by default

For example:

The administrator wants to override the default values for WINHTTP_OPTION_SECURE_PROTOCOLS to specify TLS 1.1 and TLS 1.2.

Take the value for TLS 1.1 (0x00000200) and the value for TLS 1.2 (0x00000800) then add them together in calculator (in programmer mode), the resulting registry value would be 0x00000A00.

Permanent Link to Post | Email Post Link | Number of Comments 0 Comment(s)

Comments

There are no comments for this post.

Add Comment

Title


Body *


CAPTCHA *

Attachments