Configures SSL protocols and cryptographic algorithms

Configures cipher list to restrict the use of certain cryptographic algorithms and protocols before establishing an encrypted SSL connection. The cipher list consists of one or more cipher strings separated by colons. Note that all cipher strings are case sensitive.

If the feature is enabled, the default value is:
'TLSv1.1:TLSv1.2:!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES'

That means: TLS v1.1 and TLS v1.2 are enabled(SSL v2.0, SSL v3.0 and TLS v1.0 are disabled). Cipher suites using ECDHE, ECDH and RSA with 128 or 256 bit AES, and prefer GCM mode.

SSL v2.0, SSL v3.0 and TLS v1.0 are no longer the approved protocols and will be permanently disabled.

Reference link for the configuration:
http://www.openssl.org/docs/apps/ciphers.html#

Supported on:

Configures SSL protocols and cryptographic algorithms

Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\VMware, Inc.\VMware VDM\Client\Security
Value NameSSLCipherList
Value TypeREG_SZ
Default ValueTLSv1.1:TLSv1.2:!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES

vdm_client.admx

Administrative Templates (Computers)

Administrative Templates (Users)