IIS TLS Correct Cypher communication options corruption troubleshooting

 Problem

In support situations is has been observed that windows updates have corrupted local cyphers used when communicating via TLS. By taking these steps listed below you can confirm the cyphers loaded on your machine in question are working by designed.

 Solution

1. Log onto the server that is having communication issues.

2. Open the browser and navigate to https://www.nartac.com/Products/IISCrypto/

3. Download and install

4. Follow the instructions to apply crypto controls to secure your website using Best Practices and disable weak protocols and ciphers such as SSL 2.0, 3.0, MD5 and 3DES

What Does IIS Crypto Do?

IIS Crypto updates the registry using the same settings from this article by Microsoft. It also updates the cipher suite order in the same way that the Group Policy Editor (gpedit.msc) does. Additionally IIS Crypto lets you create custom templates that can be saved for use on multiple servers. The command line version contains the same built-in templates as the GUI version and can also be used with your own custom templates. IIS Crypto has been tested on Windows Server 2008, 2008 R2 and 2012, 2012 R2, 2016, 2019 and 2022.

 Related articles