Manage SSL/TLS settings in IE

The other day I had the need to configure SSL/TLS settings in IE for users in my organization. While I’m aware of the easy methods of managing IE settings using group policy, I always prefer to use Group Policy Preferences to manage the settings instead. After a bit of digging I identified that to manage the SSL/TLS settings you simply had to change the value of ‘SecureProtocols’ at HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings.

Below are the possible values that you can use and what they do.

0 – Disable SSLTLS
8 – SSL 2.0
32 – SSL 3.0
40 – SSL 2.0, SSL 3.0
128 – TLS 1.0
136 – SSL 2.0, TLS 1.0
160 – SSL 3.0, TLS 1.0
168 – SSL 2.0, SSL 3.0, TLS 1.0
512 – TLS 1.1
520 – SSL 2.0, TLS 1.1
544 – SSL 3.0, TLS 1.1
552 – SSL 2.0, SSL 3.0, TLS 1.1
640 – TLS 1.0, TLS 1.1
648 – SSL 2.0, TLS 1.0, TLS 1.1
672 – SSL 3.0, TLS 1.0, TLS 1.1
680 – SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1
2048 – TLS 1.2
2056 – SSL 2.0, TLS 1.2
2080 – SSL 3.0, TLS 1.2
2088 – SSL 2.0, SSL 3.0, TLS 1.2
2176 – TLS 1.0, TLS 1.2
2184 – SSL 2.0, TLS 1.0, TLS 1.2
2208 – SSL 3.0, TLS 1.0, TLS 1.2
2216 – SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.2
2560 – TLS 1.1, TLS 1.2
2568 – SSL 2.0, TLS 1.1, TLS 1.2
2592 – SSL 3.0, TLS 1.1, TLS 1.2
2600 – SSL 2.0, SSL 3.0, TLS 1.1, TLS 1.2
2688 – TLS 1.0, TLS 1.1, TLS 1.2
2696 – SSL 2.0, TLS 1.0, TLS 1.1, TLS 1.2
2720 – SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2
2728 – SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2

Values were obtained from: http://blogs.technet.com/b/iede/archive/2010/09/27/as-59-63-ssl-2-0-ssl-3-0-tls-1-0-tls-1-1-tls-1-2-verwenden.aspx

Leave a Reply

Your email address will not be published. Required fields are marked *