Windows 10: When will TLS 1.3 be available in SCHANNEL?

I have not been able to find any official information about the implementation of TLS 1.3 security protocol in Windows 10.

In particular the SCHANNEL api which implements cryptography on streams that for example, a web server would use, like IIS.


Information on this is important as we must implement an SCHANNEL server which supports TLS 1.3 well before the previous versions are considered deprecated on the web. SSLLABS is adding a warning to our security test which states:

This server supports TLS 1.0 and TLS 1.1. Grade will be capped to B from January 2020.

So, in January, which is 2 months away, only TLS 1.2 will still be considered grade A security, and of course it will expire soon as well, as TLS 1.3 is a major improvement to 1.2.

We need lead time to implement and test TLS 1.3 well before the expiration of older protocols.


And yet, as of this time (11/11/2019) there has been no information on the Windows timeframe for support of TLS 1.3.


Please give us more information on the topic of TLS 1.3 security protocol.

:)

 

Microsoft Edge TLS Security


After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

 

SSL/TLS

Instructions

1. From Notepad.exe, create a text file named TLS12-Enable.reg.

2. Copy and paste the following text into the file.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:00000001

3. Save TLS12-Enable.reg.

4. Double-click the TLS12-Enable.reg file.

5. Click Yes to update your Windows Registry with these changes.

6. Restart the machine for the changes to take effect.

 

TLS 1.2

Hi,

My name is Angel. I am an Independent Advisor. Thank you for posting in Microsoft Community.

To update to TLS 1.2 follow this instructions:

1. From Notepad.exe, create a text file named TLS12-Enable.reg.

2. Copy and paste the following text into the file.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:00000001

1. Save TLS12-Enable.reg.

2. Double-click the TLS12-Enable.reg file.

3. Click Yes to update your Windows Registry with these changes.

4. Restart the machine for the changes to take effect.

Registry disclaimer

To do so: Important this section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection,
back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

How to back up and restore the registry in Windows

http://support.microsoft.com/kb/322756/

Hope the information provided is useful. If the issue persists, reply here and we will be glad to help you.

Angel.