question

lpe-1976 avatar image
0 Votes"
lpe-1976 asked ·

TLS 1.1 and TLS 1.2 Easy Fix download missing

I am trying to get from MS Support site the Easy Fix that modifies the registry in a correct way. The name is 'MicrosoftEasyFix51044.msi' but there is no link at the mentioned page. Why and where can I get the easy fix now?


windows-7-general
· 1
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

 https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi

0 Votes 0 ·
cooldadtx avatar image
1 Vote"
cooldadtx answered ·

The easy fix is just a reg file that has the registry entry defined in the KB article. Here's an example of what it might look like.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000AA8

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000AA8

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000A80

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000A80


The above, should, enable all protocols for x86 and x64. It also follows the recommendation to enable it in IE although that is probably better handled by a GP policy.

Note that this is highly configurable as you may or may not want all the protocols enabled. Most modern HTTPS sites require TLS 1.2 only so enabling the others is a security risk.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JoyQiao-MSFT avatar image
0 Votes"
JoyQiao-MSFT answered ·

Hi,

Thank you for coming Microsoft Q&A.

I am glad to hear you issue has been resolved by your efforts.

As there is a special forum for TLS, if you have any other issue about TLS, please create thread in IIS forum.

Bests,

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.