启用和禁用TLS和SSL在IE中，在Z0F4137ED1502B5045D6045D6083AA258B58B5C42Z中使用本地机器（不是Z0F4137ED152B502B502602605DDEMEA）

Question

I've been reading some articles and Microsoft docs and looking at some StackOverflow questions to change/toggle tls and ssl settings in internet explorer(IE) in Advanced Tab but these scripts got me nowhere. Till now I've tried Enable TLS and Disable SSL via PowerShell script

https://medium.com/think-stack/disabling-tls-1-0-on-your-workstations-eb8377a2bd09

and some other scripts which have pointed me to the same directory.

A registry is being made at that path but tls and ssl settings do not change.

Please, help me where am I making mistake. Thanks in advance.

Answer 1

The reg key for IE TLS and SSL setting is under this path:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

The reg key is SecureProtocols . Each protocol you circle in the picture modifies the same registry key, the DWORD value will be a hexadecimal sum of the decimal value of each check box. You can check/uncheck the options in IE setting to observe how the SecureProtocols value is changing.

For example, if you want to check all the options, the value should be 0x00002aa0 (10912) . The PowerShell script should be like this:

Set-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings' -name 'SecureProtocols' -value '0x00002aa0' -Type DWord
Write-Host 'Enable All'

The other situations are similar, you just need to change the value of the reg key.