<div>
<a href="http://support.microsoft.com/kb/245030/en-us" rel="ugc">http://support.microsoft.com/kb/245030/en-us</a><br />

</div>


http://support.microsoft.com/kb/245030/en-us [http://support.microsoft.com/kb/245030/en-us]


<div>
Thanks. I have already seen this document but cannot find the specific registers that SMetrics are talking about. Can you be more specific about the page and section I should be looking at?<br />
Thanks.<br />

</div>


Thanks. I have already seen this document but cannot find the specific registers that SMetrics are talking about. Can you be more specific about the page and section I should be looking at?
Thanks.


Change to .reg for disabling weaker ciphers

DisableWeakCiphers.txt

<div>
<div class="content wysiwyg-content">
An SMetrics PCI scan requires me to disable these specific weak ciphers on an iis 5 server: 'EXP-RC2-CBC-MD5' and 'EXP-RC4-MD5' . Can you tell me what registers I need to create/disable to achieve this.<br />
Thanks.
</div>
</div>


An SMetrics PCI scan requires me to disable these specific weak ciphers on an iis 5 server: 'EXP-RC2-CBC-MD5' and 'EXP-RC4-MD5' . Can you tell me what registers I need to create/disable to achieve this.
Thanks.

I need to disable these specific weak ciphers on an iis 5 server: 'EXP-RC2-CBC-MD5' and 'EXP-RC4-MD5' . Can you tell me what registers I need to create/disabale to achieve this.

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

Encryption is the process of encoding messages or information in such a way that only authorized parties can read it. In an encryption scheme, the intended communication information or message, referred to as plaintext, is encrypted using an encryption algorithm, generating ciphertext that can only be read if decrypted. For technical reasons, an encryption scheme usually uses a pseudo-random encryption key generated by an algorithm. An authorized recipient can easily decrypt the message with the key provided by the originator to recipients, but not to unauthorized interceptors.

Encryption

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.