Skip to main content

Disable SSL 3.0 on a SecureAuth IdP Appliance

This article describes how to disable SSL 3.0 on a SecureAuth IdP Appliance.

Applies to

SecureAuth IdP

Discussion

Warning

Before disabling SSL 3.0 on your SecureAuth Appliances you should perform an audit of your network to ensure no devices which communicate with the SecureAuth IdP appliance require SSL 3.0. If a device has a dependency on SSL 3.0, and you remove the protocol from the appliance, communication will no longer be possible and may potentially result in downtime for users.

Warning

These instructions explain how to modify the Windows registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow the instructions carefully. For added protection, back up the registry before following the instructions below. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, please see the Microsoft Knowledge Base article How to back up and restore the registry in Windows.

Instructions

Follow the directions below to disable SSL 3.0 on your SecureAuth IdP Appliance.

Windows Server 2012 (R2)

  1. Open the Registry Editor

    1. Point the cursor at the lower right corner of the screen and click the Search 22839624.png option from the Charms Bar once it displays.

    2. In the Apps screen, type regedit into the Search field.

    3. In the Results for "regedit" list, click regedit.exe

  2. Edit the Registry

    1. In the Registry Editor navigate to the following key:

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0

    2. Expand SSL 3.0, click on Client, and locate the Enabled REG_DWORD entry.

      22839625.png

    3. Change the Enabled value to 0 (zero); this disables SSL 3.0.

      22839626.png

    4. Under SSL 3.0, click on Server, and locate the Enabled REG_DWORD entry.

      22839627.png

    5. Change the Enabled value to 0 (zero); this disables SSL 3.0.

      22839626.png

    6. Under SSL 3.0, click on Server, and locate the DisabledByDefault REG_DWORD entry.

      22839648.png

    7. Change the DisableByDefault value to 1. Make sure the Base option is set to Decimal.

      22839649.png

    8. Exit the Registry Editor.

  3. Restart the Server

    1. Point the cursor at the lower right corner of the screen and click the Settings icon on the Charms Bar.

    2. From Settings, choose the Power button and select Restart.

      22839655.png

    3. Select the description which best describes the reason for rebooting and choose Continue.

Windows Server 2008 R2

  1. Open the Registry Editor

    1. Click Start, and then click Run.

    2. Type Regedit, and then click OK.

  2. Edit the Registry

    1. In the Registry Editor navigate to the following key

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0

    2. Expand SSL 3.0, click on Client, and locate the Enabled REG_DWORD entry.

      22839629.png

    3. Change the Enabled value to 0 (zero), this will disable SSL 3.0.

      22839630.png

    4. Under SSL 3.0, click on Server, and locate the Enabled REG_DWORD entry.

      22839644.png

    5. Change the Enabled value to 0 (zero), this will disable SSL 3.0.

      22839630.png

    6. Under SSL 3.0, click on Server, and locate the DisabledByDefault REG_DWORD entry.

      22839650.png

    7. Change the DisableByDefault value to 1 making sure the Base option is set to Decimal.

      22839651.png

    8. You can now exit the registry editor.

  3. Restart the Server

    1. From the Start menu choose Restart.

      22839653.png

    2. At the Shut Down Windows dialog, enter your reason for rebooting, and then click the OK button.

      22839656.png

Internet Explorer

Follow the instructions below to disable SSL 3.0 on the Internet Explorer browser used on the SecureAuth IdP Appliance.

Disable SSL 3.0 and enable TLS 1.0, TLS 1.1, and TLS 1.2 in Internet Explorer

  1. On the Internet Explorer Tools menu, click Internet Options.

  2. In the Internet Options dialog box, click the Advanced tab.

  3. In the Security category, uncheck Use SSL 3.0 and check Use TLS 1.0, Use TLS 1.1, and Use TLS 1.2 (if available).

  4. Click OK.

  5. Exit and restart Internet Explorer.

In this section: