مكتبة الشروحات

Microsoft IIS: How to Disable the SSL v3 Protocol (repeat for SSL v2)

1. Open the Registry Editor and run it as administrator.

   For example, in Windows 2012:

   1. On the Start screen type regedit.exe.

   2. Right-click on regedit.exe and click Run as administrator.

2. In the Registry Editor window, go to:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols\

   

3. In the navigation tree, right-click on Protocols, and in the pop-up menu, click New > Key.

   

4. Name the key, SSL 3.0.

5. In the navigation tree, right-click on the new SSL 3.0 key that you just created, and in the pop-up menu, click New > Key.

   

6. Name the key, Client.

7. In the navigation tree, right-click on the new SSL 3.0 key again, and in the pop-up menu, click New > Key.

   

8. Name the key, Server.

9. In the navigation tree, under SSL 3.0, right-click on Client, and in the pop-up menu, click New > DWORD (32-bit) Value.

   

10. Name the value DisabledByDefault.

11. In the navigation tree, under SSL 3.0, select Client and then, in the right pane, double-click the DisabledByDefault DWORD value.

    

12. In the Edit DWORD (32-bit) Value window, in the Value Data box change the value to 1 and then, click OK.

13. In the navigation tree, under SSL 3.0, right-click on Server, and in the pop-up menu, click New > DWORD (32-bit) Value.

    

14. Name the value Enabled.

15. In the navigation tree, under SSL 3.0, select Server and then, in the right pane, double-click the Enabled DWORD value.

    

16. In the Edit DWORD (32-bit) Value window, in the Value Data box leave the value at 0 and then, click OK.

17. Restart your Windows server.

    You have successfully disabled the SSL v3 protocol. (Repeat for SSL v2)