TLS 1.0 and TLS 1.1 will be disabled in Windows: here’s what you can do

jerry23

9 months ago

tls-10-and-tls-1.1-will-be-disabled-in-windows:-here’s-what-you-can-do

TLS 1.0 (Transport Layer Security) and TLS 1.1 will be disabled on Windows very soon, the Redmond-based tech giant says in the latest blog posts. The two internet protocols were published in 1999, and 2006 respectively, and they were used to set up an encrypted channel of communication between a client and server. These versions have long been surpassed by TLS 1.2 and TLS 1.3, meanwhile.

Even more, over the past several years, TLS 1.0 and TLS 1.1 were no longer used due to a variety of security issues. So with this in mind, TLS 1.0 and TLS 1.1 will be disabled by Microsoft starting with the Windows 11 Insider Preview builds in September 2023 and future Windows OS releases.

But, if you need them, you can still be able to re-enable TLS 1.0 or TLS 1.1 for those of you who need to maintain compatibility.

Guidance for users and IT admins

TLS 1.0 and TLS 1.1 have already been disabled by Microsoft 365 products as well as WinHTTP and WinINet API surfaces. And most newer versions of applications support TLS 1.2 or higher protocol versions.

However, if there are no alternatives available and TLS 1.0 or TLS 1.1 is needed, you will be able to re-enable these protocol versions with a system registry setting:

Set a (D)TLS or SSL protocol version to the Enabled state.
Create a DWORD registry value named “Enabled” with an entry value of “1” under the corresponding version-specific subkey.

Examples of TLS 1.0 subkeys are as follows:

HKLM SYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.0Client

HKLM SYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.0Server

However, Microsoft warns you that re-enabling TLS 1.0 or TLS 1.1 on machines should only be done as a last resort, and as a temporary solution until incompatible applications can be updated or replaced. Support for these legacy TLS versions may be removed completely in the future.

The Redmond-based tech giant has also prepared a list of applications that will suffer from disabling the TLS 1.0 and TLS 1.1 protocols: