I am trying to get from MS Support site the Easy Fix that modifies the registry in a correct way. The name is 'MicrosoftEasyFix51044.msi' but there is no link at the mentioned page. Why and where can I get the easy fix now?
TLS 1.1 and TLS 1.2 Easy Fix download missing
https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi
The easy fix is just a reg file that has the registry entry defined in the KB article. Here's an example of what it might look like.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000AA8
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000AA8
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000A80
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000A80The above, should, enable all protocols for x86 and x64. It also follows the recommendation to enable it in IE although that is probably better handled by a GP policy.
Note that this is highly configurable as you may or may not want all the protocols enabled. Most modern HTTPS sites require TLS 1.2 only so enabling the others is a security risk.
Hi,
Thank you for coming Microsoft Q&A.
I am glad to hear you issue has been resolved by your efforts.
As there is a special forum for TLS, if you have any other issue about TLS, please create thread in IIS forum.
Bests,
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
6 people are following this question.
