• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 482
  • Last Modified:

Disabling SSLv3 on IIS7

How can I disable SSL3 on an IIS 7 server, and what is the impact on doing this ?

I have been asked to do this cuz of the POODLE vulnerability.
0
Aleks
Asked:
Aleks
1 Solution
 
Big MontySenior Web Developer / CEO of ExchangeTree.org Commented:
if you're comfortable using the registry, open up regedit and look for the key below:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server

Create/Edit the variable Enabled, make it of type DWORD, and give it a value of "0", then reboot the server

always create a backup of the registry before editing it!
0
 
Scott Fell, EE MVEDeveloper & EE ModeratorCommented:
Before doing anything, make sure it is even an issue.  You can check your domain https://www.ssllabs.com/ssltest/index.html
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now