TLS 1.1
Enables or disables the use of TLS 1.1. TLS 1.1 and 1.2 are without known security issues.
Changing this setting will require a restart of the computer before the setting will take effect.
Supported on: At least Windows 7
Enable Client-side TLS 1.1 (eg., Internet Explorer)Enable policy:
| Registry Path | Value Name | Value Type | Value |
|---|---|---|---|
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client | Enabled | REG_DWORD | 1 |
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client | DisabledByDefault | REG_DWORD | 0 |
| Registry Path | Value Name | Value Type | Value |
|---|---|---|---|
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client | Enabled | REG_DWORD | 0 |
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client | DisabledByDefault | REG_DWORD | 1 |
Enable Server-side TLS 1.1 (eg., IIS)Enable policy:
| Registry Path | Value Name | Value Type | Value |
|---|---|---|---|
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server | Enabled | REG_DWORD | 1 |
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server | DisabledByDefault | REG_DWORD | 0 |
| Registry Path | Value Name | Value Type | Value |
|---|---|---|---|
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server | Enabled | REG_DWORD | 0 |
| SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server | DisabledByDefault | REG_DWORD | 1 |
schannel.admx
- Network
- SChannel Configuration Settings
- Cipher Suites
- Hashes
- Key Exchange Algorithms
- Protocols
- SChannel Logging
- SSL Configuration Settings
- Ciphers
- Hashes
- Key Exchanges
- Protocols
- SChannel Configuration Settings