Disable SSL 3.0

Refer to the following information to disable SSL 3.0. Google recommends disabling SSLv3.

  1. Open the Registry Editor, and run it as an administrator.
  2. In the Registry Editor window, navigate to KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols\.

  3. Right-click on the Protocols folder, and select New > Key.

  4. Name the key SSL 3.0.
  5. In the navigation pane, right-click on the new SSL 3.0 key that you just created, and select New > Key.

  6. Name the key Client.
  7. In the navigation pane, right-click on the new SSL 3.0 key again, and select New > Key.

  8. Name the key Server.
  9. In the navigation pane, under SSL 3.0, right-click on Client, and select New > DWORD (32-bit) Value.

  10. Name the value DisabledByDefault.
  11. In the navigation pane, under SSL 3.0, select Client.
  12. In the right pane, double-click the DisabledByDefault DWORD value.

  13. In the Edit DWORD (32-bit) Value window, change Value data to 1, and select OK.
  14. In the navigation pane, under SSL 3.0, right-click on Server, and select New > DWORD (32-bit) Value.

  15. Name the value Enabled.
  16. In the navigation pane, under SSL 3.0, select Server.
  17. In the right pane, double-click the Enabled DWORD value.
  18. In the Edit DWORD (32-bit) Value window, verify that Value data is set to 0.

  19. Select OK.
  20. Restart your Windows server.