How to disable yhe protocol on client ?

<< Click to Display Table of Contents >>

Navigation:  Technical Informations > Deactivation of the SSL V3, TLS V1.0 and TLS V1.1 >

How to disable yhe protocol on client ?

In order to change the protocols, go to Registry Editor :

1.Open Start menu (Windows key) and type regedit

2.Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

 

Ecran01

 

3.(Do this if SSL/TLS registry key are already present. Otherwise Go To Step 9)
In the navigation tree (left side), right-click on Protocols, and in the pop-up menu, click New > Key.

4.Name the key SSL 3.0.

5.In the navigation tree, right-click on the new SSL 3.0 key, and in the pop-up menu, click New > Key.

6.Name the key Client.

7.In the navigation tree under SSL 3.0, right-click on Client, and in the pop-up menu, click New > DWORD (32-bit) Value.

8.Name the value DisabledByDefault if you want this protocol to be negotiable (ex: if you have another application that uses this protocol). Otherwise, if you want to completely disable it, name the value Enabled.

9.If you named the value DisabledByDefault, change its value (double-click) to 1 (hexadecimal).
If you named the value Enabled, change its value to 0.

 

The following example shows SSL 3.0 disabled in the registry (ignore the Server key):

 

Ecran02

 

10.Repeat Steps 3-4-5-6-7-8 for TLS 1.0 and TLS 1.1.

11.Create a new key named TLS 1.2 under the Protocols, and create a new key named Client  under the TLS 1.2.

12.Create a new DWORD (32-bit) Value under Client, and name it Enabled, and change its value to 1 (Steps 11-12 will activate the TLS 1.2 protocol in the registry).

 

The following example shows TLS 1.2 enabled in the registry (ignore the Server key):

 

Ecran03