Ensure TLS 1.2 is Enabled

SedangLevel 1Otomatisiis

Deskripsi

TLS 1.2 is the most recent and mature protocol for protecting the confidentiality and integrity of HTTP traffic. SCHANNEL\Protocols\TLS 1.2\Server must have Enabled=1 and DisabledByDefault=0. PowerShell 5.1; reads the registry (run elevated).

Cara pemeriksaan

Metode audit: Registry Windows

registry

$base = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols'; $p = Get-ItemProperty -Path "$base\TLS 1.2\Server" -ErrorAction SilentlyContinue; if ($null -ne $p -and $p.Enabled -eq 1 -and $p.DisabledByDefault -eq 0) { 'compliant' } else { 'noncompliant' }

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Force | Out-Null; set DWORD Enabled=1 and DisabledByDefault=0, then reboot.

Properti

Sistem operasi: Apa saja
Tag: iistls
Referensi: CIS Microsoft IIS 10 Benchmark v1.2.1 - 7.6 Ensure TLS 1.2 is Enabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target iis