How do enable/disable TLS versions on a server

Question

TLS version 1.0 and 1.1 have been deprecated since 2016, but most Azure VMs support it anyway. This is a security issue that a client may be informed of by a third party security consultant. PCI compliance requires that vendors secure their systems against malicious attacks by disabling TLS 1.0 and 1.1.

(I am not sure that our clients are required to follow these standards, because technically payment data is not supposed to be accessible by Rock, but here is how to get the job done.)

Answer 1

1.) RDP into the client server

2.) Open Google Chrome and navigate to this site: https://www.nartac.com/Products/IISCrypto

3.) Download the GUI, and run

4.) Deselect the TLS v1.0 and 1.1. Click Apply.

4.) Restart the server when it is convenient.

Comments

(Originally by Unknown) Thanks!