{"id":4830,"date":"2023-07-12T10:29:46","date_gmt":"2023-07-12T17:29:46","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4830"},"modified":"2023-07-12T10:29:48","modified_gmt":"2023-07-12T17:29:48","slug":"how-to-disable-weak-cipher-suites-in-iis","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4830","title":{"rendered":"How to Disable Weak Cipher Suites in IIS"},"content":{"rendered":"\n

By default, IIS is installed with 2 weak SSL 2.0 cipher suites that are enabled: SSL2_RC4_128_WITH_MD5<\/em> and SSL2_DES_192_EDE3_CBC_WITH_MD5<\/em>. This can impact the security of AppScan Enterprise, and the cipher suites should be disabled.<\/p>\n\n\n\n

Before you begin<\/h2>\n\n\n\n

Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on your computer.<\/p>\n\n\n\n

Procedure<\/h2>\n\n\n\n
  1. Open the Registry Editor (Start<\/strong>\u00a0>\u00a0Run<\/strong>\u00a0>\u00a0regedit<\/strong>).<\/li>
  2. In the\u00a0HKEY_LOCAL_MAC HINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Ciphers\u00a0directory:
    1. Create a new key called\u00a0RC4 128\/128\u00a0(Ciphers<\/strong>\u00a0>\u00a0New<\/strong>\u00a0>\u00a0KeyRC4 128\/128<\/strong>).<\/li>
    2. Right-click the key’s name and create a new DWORD (32-bit) Value called ‘Enabled’. (New<\/strong>\u00a0>\u00a0DWORD (32-bit) Value<\/strong>\u00a0>\u00a0Enabled<\/strong>).<\/li>
    3. Leave the default value as ‘0’.<\/li><\/ol><\/li>
    4. In the\u00a0HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Hashes\u00a0directory:
      1. Create a key called\u00a0MD5\u00a0(Hashes<\/strong>\u00a0>\u00a0New<\/strong>\u00a0>\u00a0Key<\/strong>\u00a0>\u00a0MD5<\/strong>).<\/li>
      2. Right-click the key’s name and create a new DWORD (32-bit) Value called ‘Enabled’. (New<\/strong>\u00a0>\u00a0DWORD (32-bit) Value<\/strong>\u00a0>\u00a0Enabled<\/strong>).<\/li>
      3. Leave the default value as ‘0’.<\/li><\/ol><\/li>
      4. Close the Registry Editor.<\/li><\/ol>\n\n\n\n

        Ref: Disabling weak cipher suites in IIS (hcltechsw.com)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

        By default, IIS is installed with 2 weak SSL 2.0 cipher suites that are enabled: SSL2_RC4_128_WITH_MD5 and SSL2_DES_192_EDE3_CBC_WITH_MD5. This can impact the security of AppScan Enterprise, and the cipher suites should be disabled. Before you begin Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[10,14,15],"tags":[1645],"class_list":["post-4830","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-windows-7-8-10","category-windows-servers","tag-disable-weak-cipher-suites-in-iis"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t