Enable TLS 1.2 on Windows 2008 R2 Server

I am trying to enable TLS 1.2 on a Windows 2008 R2 server. I made registry entries to enable TLS 1.2 as stated in the following link: http://forums.iis.net/t/1201043.aspx .

I also tried the powershell script in the link: http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12

While monitoring via wireshark, I found that the client hello message is sending TLS 1.2 version and the protocol is showing TLSv1. The server hello message shows tlsv1 in the protocol field and TLS 1.0 version.

I don't know if there is anything missing to enable TLS 1.2. I think I did all the registry entries. Any help would be appreciated.

The above services run on the HASP server and run on port 443.

Another strange thing: I am using IIS 7.5 server. When I deploy another srvice to port 8443.it only works with TLS 1.2 i.e. from 9. IIS 7.5 and the Hasp Server Service run on the same computer. But throgh wireshark only shows TCP protocol. NO SSL protocl is used here for https communication. How is this possible?

Also the last point, even if I disable SSLv3 from the server registry or delete all entries. url still works on sslv3. Is it possible that we need to update some other files on the windows server.

+3


source to share





All Articles