Skip to content
/ Settings-for-TLS-and-.Net-to-enforce-strong-crypto Public

Registry settings for TLS and .Net to enforce strong crypto and increase Schannel logging to include Warnings and Errors

1 star 1 fork Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

ToddMaxey/Settings-for-TLS-and-.Net-to-enforce-strong-crypto

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
Disabled TLS Protocols.ps1
Disabled TLS Protocols.ps1
 
 
README.md
README.md
 
 

Repository files navigation

Settings-for-TLS-and-.Net-to-enforce-strong-crypto

The PowerShell script sets all the necessary settings to assure you are not using an old, outdated, and insecure protocols for securing you internet communication traffic.

#Cryptographic Settings v1.3 #By Todd Maxey

Write-Host " " Write-Host "This will set .NETFramework v2.0.50727, .NETFramework v4.0.30319 to utilize strong cryptographic and force these version it use the machines cryptographic settings." -ForegroundColor Green Write-Host " " Write-Host "The WinHTTP setting will be set to use TLS 1.2 and TLS 1.3" -ForegroundColor Green Write-Host " " Write-Host "It will also disabled SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, RC4 Ciphers and enabled TLS 1.2 and if this is a Windows 10 build 18362+ it will enabled TLS 1.3" -ForegroundColor Green Write-Host " " Write-Host "This script maakes registry changes! Be sure to have a backup of the machine before proceesing" -ForegroundColor Red Write-Host " " Write-Host "Pausing.... Hit Enter to continue or ctrl+c to escape" -ForegroundColor yellow Read-host " "

Self-elevate the script if required

if (-Not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')) { if ([int](Get-CimInstance -Class Win32_OperatingSystem | Select-Object -ExpandProperty BuildNumber) -ge 6000) { $CommandLine = "-File "" + $MyInvocation.MyCommand.Path + "" " + $MyInvocation.UnboundArguments Start-Process -FilePath PowerShell.exe -Verb Runas -ArgumentList $CommandLine Exit } }

#Initialization $version = $Null $SessionTime = (get-date -f dddd-MMMM-dd-yyyy-HH.mm.ss) $FilePath = $path+$env:computername+" "+$SessionTime+".reg" $path = "C:\temp\registry backups"

#Determine of path exist and if not create path If(!(test-path $path)) { New-Item -ItemType Directory -Force -Path $path }

Display current settings

$Multi_Protocol_Unified_Hello_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello" $Multi_Protocol_Unified_Hello_Client_DisabledByDefault = $null $Multi_Protocol_Unified_Hello_Client_Enabled = $null $Multi_Protocol_Unified_Hello_Server_DisabledByDefault = $null $Multi_Protocol_Unified_Hello_Server_Enabled = $null

$SSL_2_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0" $SSL_2_Client_DisabledByDefault = $null $SSL_2_Client_Enabled = $null $SSL_2_Server_DisabledByDefault = $null $SSL_2_Server_Enabled = $null

$SSL_3_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0" $SSL_3_Client_DisabledByDefault = $null $SSL_3_Client_Enabled = $null $SSL_3_Server_DisabledByDefault = $null $SSL_3_Server_Enabled = $null

$TLS_1_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0" $TLS_1_Client_DisabledByDefault = $null $TLS_1_Client_Enabled = $null $TLS_1_Server_DisabledByDefault = $null $TLS_1_Server_Enabled = $null

Multi-Protocol Unified Hello\Client

if (test-path -Path $($Multi_Protocol_Unified_Hello_Path)){

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Client") { $Multi_Protocol_Unified_Hello_Client_DisabledByDefault = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red } Write-host if (1 -eq $Multi_Protocol_Unified_Hello_Client_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Client\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $Multi_Protocol_Unified_Hello_Client_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Client\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Client") { $Multi_Protocol_Unified_Hello_Client_Enabled = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Client")).Enabled } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $Multi_Protocol_Unified_Hello_Client_Enabled) { Write-Host "Multi-Protocol Unified Hello\Client\Enabled Value ="$Multi_Protocol_Unified_Hello_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $Multi_Protocol_Unified_Hello_Client_Enabled) { Write-Host "Multi-Protocol Unified Hello\Client\Enabled Value ="$Multi_Protocol_Unified_Hello_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red }

Multi-Protocol Unified Hello\Server

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Server") { $Multi_Protocol_Unified_Hello_Server_DisabledByDefault = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $Multi_Protocol_Unified_Hello_Server_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Server\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $Multi_Protocol_Unified_Hello_Server_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Server\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Server") { $Multi_Protocol_Unified_Hello_Server_Enabled = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Server")).Enabled } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $Multi_Protocol_Unified_Hello_Servert_Enabled) { Write-Host "Multi-Protocol Unified Hello\Server\Enabled Value ="$Multi_Protocol_Unified_Hello_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $Multi_Protocol_Unified_Hello_Server_Enabled) { Write-Host "Multi-Protocol Unified Hello\Server\Enabled Value ="$Multi_Protocol_Unified_Hello_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Server does not exist" -ForegroundColor Red }

#SSL 2.0\Client if (test-path -Path $($SSL_2_Path)){

if (test-path -Path "$($SSL_2_Path)Client") { $SSL_2_Client_DisabledByDefault = (Get-ItemProperty ($SSL_2_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Client_DisabledByDefault) { Write-Host "SSL 2.0\Client\DisabledByDefault Value ="$SSL_2_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_2_Client_DisabledByDefault) { Write-Host "SSL 2.0\Client\DisabledByDefault Value ="$SSL_2_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_2_Path)Client") { $SSL_2_Client_Enabled = (Get-ItemProperty ($SSL_2_Path + "Client")).Enabled } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Client_Enabled) { Write-Host "SSL 2.0\Client\Enabled Value ="$SSL_2_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_2_Client_Enabled) { Write-Host "SSL 2.0\Client\Enabled Value ="$SSL_2_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

SSL 2.0\Server

if (test-path -Path "$($SSL_2_Path)Server") { $SSL_2_Server_DisabledByDefault = (Get-ItemProperty ($SSL_2_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($SSL_2_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Server_DisabledByDefault) { Write-Host "SSL 2.0\Server\DisabledByDefault Value ="$SSL_2_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_2_Server_DisabledByDefault) { Write-Host "SSL 2.0\Server\DisabledByDefault Value ="$SSL_2_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_2_Path)Server") { $SSL_2_Server_Enabled = (Get-ItemProperty ($SSL_2_Path + "Server")).Enabled } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Server_Enabled) { Write-Host "SSL 2.0\Server\Enabled Value ="$SSL_2_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_2_Server_Enabled) { Write-Host "SSL 2.0\Server\Enabled Value ="$SSL_2_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($SSL_2_Path)Server does not exist" -ForegroundColor Red }

#SSL 3.0\Client if (test-path -Path $($SSL_3_Path)){

if (test-path -Path "$($SSL_3_Path)Client") { $SSL_3_Client_DisabledByDefault = (Get-ItemProperty ($SSL_3_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Client_DisabledByDefault) { Write-Host "SSL 3.0\Client\DisabledByDefault Value ="$SSL_3_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_3_Client_DisabledByDefault) { Write-Host "SSL 3.0\Client\DisabledByDefault Value ="$SSL_3_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_3_Path)Client") { $SSL_3_Client_Enabled = (Get-ItemProperty ($SSL_3_Path + "Client")).Enabled } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Client_Enabled) { Write-Host "SSL 3.0\Client\Enabled Value ="$SSL_3_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_3_Client_Enabled) { Write-Host "SSL 3.0\Client\Enabled Value ="$SSL_3_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

SSL 3.0\Server

if (test-path -Path "$($SSL_3_Path)Server") { $SSL_3_Server_DisabledByDefault = (Get-ItemProperty ($SSL_3_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($SSL_3_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Server_DisabledByDefault) { Write-Host "SSL 3.0\Server\DisabledByDefault Value ="$SSL_3_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_3_Server_DisabledByDefault) { Write-Host "SSL 3.0\Server\DisabledByDefault Value ="$SSL_3_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_3_Path)Server") { $SSL_3_Server_Enabled = (Get-ItemProperty ($SSL_3_Path + "Server")).Enabled } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Server_Enabled) { Write-Host "SSL 3.0\Server\Enabled Value ="$SSL_3_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_3_Server_Enabled) { Write-Host "SSL 3.0\Server\Enabled Value ="$SSL_3_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($SSL_3_Path)Server does not exist" -ForegroundColor Red }

#TLS 1.0\Client if (test-path -Path $($TLS_1_Path)){

if (test-path -Path "$($TLS_1_Path)Client") { $TLS_1_Client_DisabledByDefault = (Get-ItemProperty ($TLS_1_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Client_DisabledByDefault) { Write-Host "TLS 1.0\Client\DisabledByDefault Value ="$TLS_1_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $TLS_1_Client_DisabledByDefault) { Write-Host "TLS 1.0\Client\DisabledByDefault Value ="$TLS_1_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($TLS_1_Path)Client") { $TLS_1_Client_Enabled = (Get-ItemProperty ($TLS_1_Path + "Client")).Enabled } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Client_Enabled) { Write-Host "TLS 1.0\Client\Enabled Value ="$TLS_1_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $TLS_1_Client_Enabled) { Write-Host "TLS 1.0\Client\Enabled Value ="$TLS_1_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

#TLS 1.0\Server

if (test-path -Path "$($TLS_1_Path)Server") { $TLS_1_Server_DisabledByDefault = (Get-ItemProperty ($TLS_1_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($TLS_1_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Server_DisabledByDefault) { Write-Host "TLS 1.0\Server\DisabledByDefault Value ="$TLS_1_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $TLS_1_Server_DisabledByDefault) { Write-Host "TLS 1.0\Server\DisabledByDefault Value ="$TLS_1_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($TLS_1_Path)Server") { $TLS_1_Server_Enabled = (Get-ItemProperty ($TLS_1_Path + "Server")).Enabled } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Server_Enabled) { Write-Host "TLS 1.0\Server\Enabled Value ="$TLS_1_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $TLS_1_Server_Enabled) { Write-Host "TLS 1.0\Server\Enabled Value ="$TLS_1_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($TLS_1_Path)Server does not exist" -ForegroundColor Red }

Pause so user can review the current setting before proceeding

Write-Host " " Write-Host "Review the current setting before proceeding" -ForegroundColor Red Write-Host " " Write-Host "Pausing.... Hit Enter to continue or ctrl+c to escape" -ForegroundColor yellow Read-host " "

.Net settings to force Strong crypto and use system TLS settings

New-ItemProperty –Path "HKLM:\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v2.0.50727" -Name SystemDefaultTlsVersions -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v2.0.50727" -Name SchUseStrongCrypto -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\Microsoft.NETFramework\v2.0.50727" -Name SystemDefaultTlsVersions -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\Microsoft.NETFramework\v2.0.50727" -Name SchUseStrongCrypto -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v4.0.30319" -Name SystemDefaultTlsVersions -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v4.0.30319" -Name SchUseStrongCrypto -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\Microsoft.NETFramework\v4.0.30319" -Name SystemDefaultTlsVersions -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SOFTWARE\Microsoft.NETFramework\v4.0.30319" -Name SchUseStrongCrypto -PropertyType "DWORD" -value "00000001" -Force

Disable SSL 2.0, SSL 30, TLS 1.0 and TLS 1.1

Enabled TLS 1.3 and if this is a Windows 10 build 10.0.18362+ enabled TLS 1.3

New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" -Name "SSL 2.0" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0" -Name "Client" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0" -Name "Server" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" -Name "Enabled" -PropertyType "DWORD" -Value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" -Name "Enabled" -PropertyType "DWORD" -Value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" -Name "SSL 3.0" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0" -Name "Client" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0" -Name "Server" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" -Name "TLS 1.0" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0" -Name "Client" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0" -Name "Server" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" -Name "TLS 1.1" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000001" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" -Name "TLS 1.2" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -Name "Enabled" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" -Name "Enabled" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000000" -Force

Disable Rc4

New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers" -Name "RC4 40/128" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" -Name "Enabled" -PropertyType "DWORD" -value "00000000" -Force

#Get OS information $version = [System.Environment]::OSVersion.Version

If (($version.Major -ige 10) -and ($version.Build -ige 18362)){ New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols" -Name "TLS 1.3" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3" -Name "Client" -Force New-Item –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3" -Name "Server" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" -Name "Enabled" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server" -Name "Enabled" -PropertyType "DWORD" -value "00000001" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000000" -Force New-ItemProperty –Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server" -Name "DisabledByDefault" -PropertyType "DWORD" -value "00000000" -Force } {else Write-host "OS is not the right version for TLS 1.3"}

#WinHttp setting to TLS 1.2 and 1.3 New-ItemProperty –Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp" -Name "DefaultSecureProtocols" -PropertyType "DWORD" -value 0x2800 -Force # TLS 1.2 is 0x800 and TLS 1.3 is 0X2000 New-ItemProperty –Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp" -Name "DefaultSecureProtocols" -PropertyType "DWORD" -value 0x2800 -Force # TLS 1.2 is 0x800 and TLS 1.3 is 0X2000

$Multi_Protocol_Unified_Hello_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello" $Multi_Protocol_Unified_Hello_Client_DisabledByDefault = $null $Multi_Protocol_Unified_Hello_Client_Enabled = $null $Multi_Protocol_Unified_Hello_Server_DisabledByDefault = $null $Multi_Protocol_Unified_Hello_Server_Enabled = $null

$SSL_2_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0" $SSL_2_Client_DisabledByDefault = $null $SSL_2_Client_Enabled = $null $SSL_2_Server_DisabledByDefault = $null $SSL_2_Server_Enabled = $null

$SSL_3_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0" $SSL_3_Client_DisabledByDefault = $null $SSL_3_Client_Enabled = $null $SSL_3_Server_DisabledByDefault = $null $SSL_3_Server_Enabled = $null

$TLS_1_Path = "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0" $TLS_1_Client_DisabledByDefault = $null $TLS_1_Client_Enabled = $null $TLS_1_Server_DisabledByDefault = $null $TLS_1_Server_Enabled = $null

Multi-Protocol Unified Hello\Client

if (test-path -Path $($Multi_Protocol_Unified_Hello_Path)){

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Client") { $Multi_Protocol_Unified_Hello_Client_DisabledByDefault = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red } Write-host if (1 -eq $Multi_Protocol_Unified_Hello_Client_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Client\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $Multi_Protocol_Unified_Hello_Client_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Client\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Client") { $Multi_Protocol_Unified_Hello_Client_Enabled = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Client")).Enabled } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $Multi_Protocol_Unified_Hello_Client_Enabled) { Write-Host "Multi-Protocol Unified Hello\Client\Enabled Value ="$Multi_Protocol_Unified_Hello_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $Multi_Protocol_Unified_Hello_Client_Enabled) { Write-Host "Multi-Protocol Unified Hello\Client\Enabled Value ="$Multi_Protocol_Unified_Hello_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red }

Multi-Protocol Unified Hello\Server

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Server") { $Multi_Protocol_Unified_Hello_Server_DisabledByDefault = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $Multi_Protocol_Unified_Hello_Server_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Server\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $Multi_Protocol_Unified_Hello_Server_DisabledByDefault) { Write-Host "Multi-Protocol Unified Hello\Server\DisabledByDefault Value ="$Multi_Protocol_Unified_Hello_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($Multi_Protocol_Unified_Hello_Path)Server") { $Multi_Protocol_Unified_Hello_Server_Enabled = (Get-ItemProperty ($Multi_Protocol_Unified_Hello_Path + "Server")).Enabled } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $Multi_Protocol_Unified_Hello_Servert_Enabled) { Write-Host "Multi-Protocol Unified Hello\Server\Enabled Value ="$Multi_Protocol_Unified_Hello_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $Multi_Protocol_Unified_Hello_Server_Enabled) { Write-Host "Multi-Protocol Unified Hello\Server\Enabled Value ="$Multi_Protocol_Unified_Hello_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($Multi_Protocol_Unified_Hello_Path)Server does not exist" -ForegroundColor Red }

#SSL 2.0\Client if (test-path -Path $($SSL_2_Path)){

if (test-path -Path "$($SSL_2_Path)Client") { $SSL_2_Client_DisabledByDefault = (Get-ItemProperty ($SSL_2_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Client_DisabledByDefault) { Write-Host "SSL 2.0\Client\DisabledByDefault Value ="$SSL_2_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_2_Client_DisabledByDefault) { Write-Host "SSL 2.0\Client\DisabledByDefault Value ="$SSL_2_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_2_Path)Client") { $SSL_2_Client_Enabled = (Get-ItemProperty ($SSL_2_Path + "Client")).Enabled } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Client_Enabled) { Write-Host "SSL 2.0\Client\Enabled Value ="$SSL_2_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_2_Client_Enabled) { Write-Host "SSL 2.0\Client\Enabled Value ="$SSL_2_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

SSL 2.0\Server

if (test-path -Path "$($SSL_2_Path)Server") { $SSL_2_Server_DisabledByDefault = (Get-ItemProperty ($SSL_2_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($SSL_2_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Server_DisabledByDefault) { Write-Host "SSL 2.0\Server\DisabledByDefault Value ="$SSL_2_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_2_Server_DisabledByDefault) { Write-Host "SSL 2.0\Server\DisabledByDefault Value ="$SSL_2_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_2_Path)Server") { $SSL_2_Server_Enabled = (Get-ItemProperty ($SSL_2_Path + "Server")).Enabled } else { Write-host "The Path $($SSL_2_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_2_Server_Enabled) { Write-Host "SSL 2.0\Server\Enabled Value ="$SSL_2_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_2_Server_Enabled) { Write-Host "SSL 2.0\Server\Enabled Value ="$SSL_2_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($SSL_2_Path)Server does not exist" -ForegroundColor Red }

#SSL 3.0\Client if (test-path -Path $($SSL_3_Path)){

if (test-path -Path "$($SSL_3_Path)Client") { $SSL_3_Client_DisabledByDefault = (Get-ItemProperty ($SSL_3_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Client_DisabledByDefault) { Write-Host "SSL 3.0\Client\DisabledByDefault Value ="$SSL_3_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_3_Client_DisabledByDefault) { Write-Host "SSL 3.0\Client\DisabledByDefault Value ="$SSL_3_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_3_Path)Client") { $SSL_3_Client_Enabled = (Get-ItemProperty ($SSL_3_Path + "Client")).Enabled } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Client_Enabled) { Write-Host "SSL 3.0\Client\Enabled Value ="$SSL_3_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_3_Client_Enabled) { Write-Host "SSL 3.0\Client\Enabled Value ="$SSL_3_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

SSL 3.0\Server

if (test-path -Path "$($SSL_3_Path)Server") { $SSL_3_Server_DisabledByDefault = (Get-ItemProperty ($SSL_3_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($SSL_3_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Server_DisabledByDefault) { Write-Host "SSL 3.0\Server\DisabledByDefault Value ="$SSL_3_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $SSL_3_Server_DisabledByDefault) { Write-Host "SSL 3.0\Server\DisabledByDefault Value ="$SSL_3_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($SSL_3_Path)Server") { $SSL_3_Server_Enabled = (Get-ItemProperty ($SSL_3_Path + "Server")).Enabled } else { Write-host "The Path $($SSL_3_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $SSL_3_Server_Enabled) { Write-Host "SSL 3.0\Server\Enabled Value ="$SSL_3_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $SSL_3_Server_Enabled) { Write-Host "SSL 3.0\Server\Enabled Value ="$SSL_3_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($SSL_3_Path)Server does not exist" -ForegroundColor Red }

#TLS 1.0\Client if (test-path -Path $($TLS_1_Path)){

if (test-path -Path "$($TLS_1_Path)Client") { $TLS_1_Client_DisabledByDefault = (Get-ItemProperty ($TLS_1_Path + "Client")).DisabledByDefault } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Client_DisabledByDefault) { Write-Host "TLS 1.0\Client\DisabledByDefault Value ="$TLS_1_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $TLS_1_Client_DisabledByDefault) { Write-Host "TLS 1.0\Client\DisabledByDefault Value ="$TLS_1_Client_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($TLS_1_Path)Client") { $TLS_1_Client_Enabled = (Get-ItemProperty ($TLS_1_Path + "Client")).Enabled } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Client_Enabled) { Write-Host "TLS 1.0\Client\Enabled Value ="$TLS_1_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $TLS_1_Client_Enabled) { Write-Host "TLS 1.0\Client\Enabled Value ="$TLS_1_Client_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

#TLS 1.0\Server

if (test-path -Path "$($TLS_1_Path)Server") { $TLS_1_Server_DisabledByDefault = (Get-ItemProperty ($TLS_1_Path + "Server")).DisabledByDefault } else { Write-host "The Path $($TLS_1_Path)Server does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Server_DisabledByDefault) { Write-Host "TLS 1.0\Server\DisabledByDefault Value ="$TLS_1_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-Host " Enabled" -ForegroundColor Green }

if (0 -eq $TLS_1_Server_DisabledByDefault) { Write-Host "TLS 1.0\Server\DisabledByDefault Value ="$TLS_1_Server_DisabledByDefault"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Red }

if (test-path -Path "$($TLS_1_Path)Server") { $TLS_1_Server_Enabled = (Get-ItemProperty ($TLS_1_Path + "Server")).Enabled } else { Write-host "The Path $($TLS_1_Path)Client does not exist" -ForegroundColor Red }

if (1 -eq $TLS_1_Server_Enabled) { Write-Host "TLS 1.0\Server\Enabled Value ="$TLS_1_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Enabled" -ForegroundColor Red }

if (0 -eq $TLS_1_Server_Enabled) { Write-Host "TLS 1.0\Server\Enabled Value ="$TLS_1_Server_Enabled"" -nonewline -ForegroundColor Yellow Write-host " Disabled" -ForegroundColor Green } else { Write-host "The Path $($TLS_1_Path)Server does not exist" -ForegroundColor Red }

#Done Write-Host " " Write-Host "All Done - REBOOT, Pretty Please, with sugar on top..." -ForegroundColor Green Write-Host " "

About

Registry settings for TLS and .Net to enforce strong crypto and increase Schannel logging to include Warnings and Errors

Resources

Readme
Activity

Stars

1 star

Watchers

1 watching

Forks

1 fork
Report repository

Releases 6

Removed settings display while its being re-worked Latest
Aug 5, 2022
+ 5 releases

Packages

 
 
 

Languages