Network Management

How to disable TLS 1.0 or 1.1 by updating the Windows registry or using IIS Crypto for the SolarWinds Platform

This article shows disable TLS 1.0 or 1.1 by updating the Windows registry or using IIS Crypto for the SolarWinds Platform

First published date

6/26/2020 5:28 PM

Last published date

12/10/2025 12:26 AM

Overview

For cipher suites and security protocols settings, SolarWinds Platform rely only on the server operating system configuration. There are options to disable TLS, one is via the registry, and the other is via 3rd party free tool called IIS Crypto.

Product section

Orion Platform

Resolution

Disable TLS 1.0 or 1.1 via Registry

  1. Open registry editor.
  2. Go to HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols.
  3. TLS 1.0 or 1.1 entry does not exist in the registry by default.
  4. Under Protocols, create a new subkey called "TLS 1.0" or "TLS 1.1"—there will be two subkeys if you need to disable both.
  5. Create a new subkey called "Server" under TLS 1.0 or TLS 1.1.
  6. In the Server key, create a DWORD DisabledByDefault entry,
  7. Set the value to 1.
  8. Reboot the server.

Disable TLS 1.0 or 1.1 using IIS Crypto (3rd Party Tool)

  1. Download IIS Crypto GUI from this link. 
  2. Open IIS Crypto.
  3. Uncheck the Server Protocols for TLS 1.0 and TLS 1.1.
  4. Reboot the server.