Disable SSL 2.0 in IIS

These instructions detail how to Disable SSL 2.0 (SSLv2) in IIS so that only SSL 3.0 (SSLv3) and TLS 1.0 are accepted for SSL connections.

  1. Backup the windows registry.
  2. Open regedt32
  3. Create a DWORD with the default value of 0 for in each of the following registry keys under HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols:
    • \PCT 1.0\Client
    • \PCT 1.0\Server
    • \SSL 2.0\Client
    • \SSL 2.0\Server
      • If the Enabled DWORD was already there, just change its value to 0
  4. A reboot is required.