Skip to content
This repository has been archived by the owner on Jan 24, 2021. It is now read-only.

Enable TLS 1.2 and 1.1 support on older operating systems

Alan Mervitz edited this page Jan 29, 2018 · 1 revision

On older operating systems TLS 1.2/1.1 is not enabled by default as listed here: Protocols in TLS/SSL

To enable TLS 1.2 and 1.1 on older operating systems (if it is supported by the older operating system), create a registry file - copy and paste the following contents to a text file and save it with a .reg extension.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000

Double click on the file to add the registry settings. Reboot the computer, and the computer should now support TLS 1.2.

Reference and additional Documentation on the specific TLS registry keys can be found here: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn786418(v=ws.11)