Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > Server Security > Can't Disable Weak Ciphers & SSLv2 in Windows 2008

Reply
Thread Tools Display Modes

Can't Disable Weak Ciphers & SSLv2 in Windows 2008

 
 
keithinsac
Guest
Posts: n/a

 
      07-30-2009
My vulnerability scanning server is detecting weak ciphers and SSL v2 are
available on installations of W2k8/IIS7. I have been through many forums,
blogs and posts and they all seem to point to the traditional registry
settings update that we do on W2k and W2k3. They don't seem to work on
Windows 2008. I work in the Security unit and have requested the
administrators for the servers test the registry settings with reboot. After
multiple iterations and retesting, we've confirmed the settings don’t work.

Does anyone have updated registry settings or a process that I can follow to
disable these?

Below are my current settings (for W2k/W2k3)

Registry Settings:
----------------------------------------------------------------------------
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\DES 56/56]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\NULL]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server]
"Enabled"=dword:0000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server]
"Enabled"=dword:00000000
----------------------------------------------------------------------------

Please assist. Thank you, Keith


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Disable Windows Firewall GPO in SBS 2008 AllenM Windows Small Business Server 6 07-10-2009 05:46 PM
Re: Disable recycle bin on Windows Server 2008 Meinolf Weber [MVP-DS] Windows Server 0 03-27-2009 08:05 AM
Re: Disable recycle bin on Windows Server 2008 Meinolf Weber [MVP-DS] Windows Server 0 03-26-2009 01:02 PM
Windows 2008 - Disable the spinning blue circle ? Peter Lawton Windows Server 0 03-19-2008 08:39 PM
RE: SSLv2 or v3 - and weak ciphers? chace zhang Windows Small Business Server 0 06-16-2006 07:37 AM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59