Windows 10: Can't get TLS v1.0 client disabled on Windows 10

HistoryThis is on my main PC running Windows 10 Education more version details below. Some time ago, I enabled TLS 1.0 to allow me to access the web interface of some old network hardware. I'm not sure what instructions I followed, but I believe I modified some registry values.For some reason I can't attach images, so I'll add inline links to screenshots.Edition Windows 10 Education Version 22H2 Installed on ‎11/‎25/‎2020 OS build 19045.4291 Experience Windows Feature Experience Pack 1000.19056.1000.0 ProblemNow I have a huge headache because for some reason when communicating with PubMed se

:)

 

How to disable TLS 1.1 on Windows 10 Pro

It looks like something happened to the formatting of the original commands. They should read as follows:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" /v Enabled /t REG_DWORD /d 0 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" /v DisabledByDefault /t REG_DWORD /d 1 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" /v Enabled /t REG_DWORD /d 0 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" /v DisabledByDefault /t REG_DWORD /d 1 /f

 

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

 

TLS 1.1 AND TLS 1.2 are gray out

Hi,

Thank you for writing to Microsoft Community forum.

As per the TLS-SSL Settings article, for TLS 1.1 and 1.2 to be enabled and negotiated, you MUST create the
DisabledByDefault entry in the appropriate sub key (Client) and set it to
0. These sub keys will not be created in the registry since these protocols are disabled by default.

Create the necessary sub keys for TLS 1.1 and 1.2, create the DisabledByDefault
DWORD values and set it to 0 in the following locations.

Type Regedit in Start menu or taskbar search box and then press Enter key. Click
Yes button when you see the User Account Control dialog. In the Registry Editor, navigate to the following key:

For TLS 1.1:

• Go to the Registry location -HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client
  
• On the right-side, right-click on the empty space, click New, click
  DWORD (32-bit) Value, and name it as DisabledByDefault.
  
• Finally, double-click on
  DisabledByDefault, and set its value data to 0.
  

For TLS 1.2:

• Go to the Registry location - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client
  
• On the right-side, right-click on the empty space, click New, click
  DWORD (32-bit) Value, and name it as DisabledByDefault.
  
• Finally, double-click on
  DisabledByDefault, and set its value data to 0.
  
  

Registry Disclaimer: The registry is a database in Windows that contains important information about system hardware, installed programs and settings, and profiles of each of the user accounts on the computer. Windows often reads
and updates the information in the registry.

Normally, software programs make registry changes automatically. You should not make unnecessary changes to the registry. Changing registry files incorrectly can cause Windows to stop working or make Windows report the wrong information.

Please take a backup of the registry. Follow the steps given in the link below:

Link: How to back up and restore the registry in Windows - Microsoft Support

Regards,

Mala.S

Microsoft Community