<div>
Under: [HKEY_LOCAL_MACHINE\SYSTEM<wbr />\CurrentCo<wbr />ntrolSet\C<wbr />ontrol\Sec<wbr />urityProvi<wbr />ders\SCHAN<wbr />NEL\Protoc<wbr />ols\SSL 2.0, <br />
<br />
Instead of Server, it was client that was set to DWORD=0. Added Server and passed the scan. Thanks!
</div>


Under: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0,

Instead of Server, it was client that was set to DWORD=0. Added Server and passed the scan. Thanks!

<div>
<div class="content wysiwyg-content">
Trying to pass a PCI compliance scan via Control Scan but keeps failing due to SSLv2 or a weak cipher is enabled. All I see in the registry is SSLv2 and I have disabled it and restarted with no luck. I'm under the impression that SSLv3 is enabled by default after disabling SSLv2?
</div>
</div>


Trying to pass a PCI compliance scan via Control Scan but keeps failing due to SSLv2 or a weak cipher is enabled. All I see in the registry is SSLv2 and I have disabled it and restarted with no luck. I'm under the impression that SSLv3 is enabled by default after disabling SSLv2?

Cannot Pass A PCI Compliance Scan Because of SSLv2

Encryption is the process of encoding messages or information in such a way that only authorized parties can read it. In an encryption scheme, the intended communication information or message, referred to as plaintext, is encrypted using an encryption algorithm, generating ciphertext that can only be read if decrypted. For technical reasons, an encryption scheme usually uses a pseudo-random encryption key generated by an algorithm. An authorized recipient can easily decrypt the message with the key provided by the originator to recipients, but not to unauthorized interceptors.