Disabling weak SSL in IIS 6

I would like to disable all ciphers below 128bit

I've read http://support.microsoft.com/kb/245030

but I just want to ensure that I'm going to do this right.

I should set create and set dword to 0x0 for the following

HKLMSYSTEM\CurrentControlSet\Control\SecurityProviders\

SCHANNEL\Ciphers\RC4 64/128 Subkey:RC4 64/128
SCHANNEL\Ciphers\RC4 56/128 Subkey:RC4 56/128
SCHANNEL\Ciphers\RC2 56/128 Subkey:RC2 56/128
SCHANNEL\Ciphers\RC2 56/56 Subkey:RC2 56/56
SCHANNEL\Ciphers\RC4 40/128 Subkey:RC4 40/128
SCHANNEL\Ciphers\RC2 40/128 Subkey:RC2 40/128

While I'm there should I disable MD5 hash?



Start Free Trial