Windows 10: how to enable tls 1.3 on windows server exchange 2022

I am trying to enable TLS 1.3 on exchange server 2022 using registry key I have added key to – HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\EnableHTTP3 with Hexadecimal value as ‘1’andHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server\Enabled with Hexadecimal value as ‘1’but still its pointing to tls 1.2 version.I am checking using wireshark

:)

 

How to know which versions of TLS is/are enabled on Windows Server 2019?

Hello, sorry I've searched around websites but am confused how to know which versions of TLS is/are enabled on Windows Server 2019?

Is TLS v1.0 & v1.1 disabled by default?

And TLS v1.2 is enabled by default?

What's the difference via the registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols and TLS listed in Web Browser settings?

Thanks in advance.

 

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

 

Windows Server 2012 R2 Exchange 2016 server Blue Screens after disabling TLS/SSL

Hi. I have a Windows Server 2012 R2 with Exchange Server 2016 installed with Exchange2016-KB5019758-x64-en.exe installed. I am attempting to harden the server so that I can install Extended Protection Extended Protection - Microsoft - CSS-Exchange . I followed the article at Exchange Server TLS configuration best practices and Exchange Server TLS configuration best practices | Microsoft Learn to harden the server. I followed the article in the steps it outlines and I notice that once I run the CiperSuitesOrder.reg and reboot, the server blue screens with System Thread Exception Not Handled (NETIO.SYS) . I was able to recover it using last known good configuration but that doesn't solve my issue as I need to disable these protocols. This server is a VM running on VMWare 7.0 with the latest VMWare patches and VMWTools installed on the guest VM.