Ensure TLS 1.2 is Enabled

SrednjaNivo 1Automatskaiis

Opis

TLS 1.2 is the most recent and mature protocol for protecting the confidentiality and integrity of HTTP traffic. SCHANNEL\Protocols\TLS 1.2\Server must have Enabled=1 and DisabledByDefault=0. PowerShell 5.1; reads the registry (run elevated).

Kako se proverava

Metod provere: Windows registar

registry

$base = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols'; $p = Get-ItemProperty -Path "$base\TLS 1.2\Server" -ErrorAction SilentlyContinue; if ($null -ne $p -and $p.Enabled -eq 1 -and $p.DisabledByDefault -eq 0) { 'compliant' } else { 'noncompliant' }

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Force | Out-Null; set DWORD Enabled=1 and DisabledByDefault=0, then reboot.

Svojstva

Operativni sistemi: Bilo koji
Oznake: iistls
Referenca: CIS Microsoft IIS 10 Benchmark v1.2.1 - 7.6 Ensure TLS 1.2 is Enabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target iis