Turn off Encryption Support

This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0 or SSL 3.0 in the browser. TLS and SSL are protocols for protecting communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other's list of supported protocols and versions and pick the most preferred match.

If you enable this policy setting, the browser will or will not negotiate an encryption tunnel with the encryption methods you select through the drop down list.

If you disable or do not configure this policy setting, the user can select which encryption method the browser will support.

NOTE: SSL 2.0 is off by default. SSL 2.0 is an outdated security protocol, and enabling SSL 2.0 impairs the performance and functionality of TLS 1.0.

Supported on: At least Internet Explorer 8.0

Secure Protocol combinations


  1. Use no secure protocols
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value0
  2. Only use SSL 2.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value8
  3. Only use SSL 3.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value32
  4. Use SSL 2.0 and SSL 3.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value40
  5. Only use TLS 1.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value128
  6. Use SSL 2.0 and TLS 1.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value136
  7. Use SSL 3.0 and TLS 1.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value160
  8. Use SSL 2.0, SSL 3.0, and TLS 1.0
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value168
  9. Only use TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value512
  10. Use SSL 2.0 and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value520
  11. Use SSL 3.0 and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value544
  12. Use SSL 2.0, SSL 3.0, and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value552
  13. Use TLS 1.0 and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value640
  14. Use SSL 2.0, TLS 1.0, and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value648
  15. Use SSL 3.0, TLS 1.0, and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value672
  16. Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value680
  17. Only use TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2048
  18. Use SSL 2.0 and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2056
  19. Use SSL 3.0 and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2080
  20. Use SSL 2.0, SSL 3.0, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2088
  21. Use TLS 1.0 and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2176
  22. Use SSL 2.0, TLS 1.0, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2184
  23. Use SSL 3.0, TLS 1.0, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2208
  24. Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2216
  25. Use TLS 1.1 and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2560
  26. Use SSL 2.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2568
  27. Use SSL 3.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2592
  28. Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2600
  29. Use TLS 1.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2688
  30. Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2696
  31. Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2720
  32. Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Value NameSecureProtocols
    Value TypeREG_DWORD
    Value2728


inetres.admx

Administrative Templates (Computers)

Administrative Templates (Users)