TLS 1.1 and TLS 1.2 Easy Fix download missing

Question

I am trying to get from MS Support site the Easy Fix that modifies the registry in a correct way. The name is 'MicrosoftEasyFix51044.msi' but there is no link at the mentioned page. Why and where can I get the easy fix now?

Answer 1

The easy fix is just a reg file that has the registry entry defined in the KB article. Here's an example of what it might look like.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000AA8

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000AA8

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000A80

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000A80

The above, should, enable all protocols for x86 and x64. It also follows the recommendation to enable it in IE although that is probably better handled by a GP policy.

Note that this is highly configurable as you may or may not want all the protocols enabled. Most modern HTTPS sites require TLS 1.2 only so enabling the others is a security risk.

Answer 2

Hi,

Thank you for coming Microsoft Q&A.

I am glad to hear you issue has been resolved by your efforts.

As there is a special forum for TLS, if you have any other issue about TLS, please create thread in IIS forum.

Bests,

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.