![]() ![]() Additional cipher suites for all platforms due to MS14-066.Version 1.6 Build 7 - Released November 17, 2014 Unchecking all cipher suites when none are specified caused all to be checked instead of unchecked.Triple DES 168/168 was renamed to Triple DES 168 for Windows Server 2008 and newer.Console application now takes built-in templates and external files as parameters.Executables are now dual signed with SHA1 and SHA256.Warning messages for disabling TLS 1.0 in Windows Server 20 R2 for RDP support.Changed cipher suite order for Best Practices template and now includes DSA certificates.Dropped support for Windows 2003 and lower.Reboot switch for the console application.Custom templates in the same folder as IIS Crypto are added to the template list automatically.Add your own cipher suites if they are not in the OS list of defaults.All cipher suites are loaded from the OS list of defaults.Windows 10 and Windows Server 2016 support.Version 2.0 Build 10 - Released July 8, 2016 Version 2.0 Build 11 - Released July 15, 2016 If a template is newer than the version expected, it reverts back to server defaults instead of just leaving the current settings.Saving templates do not include the version nor is the header copied.Invalid cast error when loading keys from the registry that are not the correct type.If the registry value type is incorrect, IIS Crypto changes it to the correct type.Force TLS 1.2 connections when using Check for Updates.Automatic upgrade of old template file format.Set DHE Minimum Server Length to 2048 for Best Practices, PCI 3.2 and Strict templates.All templates disable the FIPS Algorithm Policy except for FIPS 140-2.PCI template has been updated to PCI version 3.2.Best Practices and PCI 3.2 templates remove the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite.TLS 1.1 and 1.2 in Windows 2008 Server first release.List HTTPS sites from IIS for the Site Scanner.Separate check list box for client side protocols.Advanced tab for additional registry settings.Version 3.0 Build 14 - Released February 10, 2019 Crash on Windows Server 2008 R2 with older versions of.Version 3.1 Build 15 - Released December 19, 2019 Only a single instance of IIS Crypto can be run.Added override enabled feature to set Protocols Enabled to 1 instead of 0xffffffff.Version 3.2 Build 16 - Released April 11, 2020 Removed a single instance check on startup.Strict template removes CBC cipher suites on Windows 2016 and above.PCI 4.0 template added which removes SHA1 and non forward secrecy cipher suites.Updated all templates to support TLS 1.3.Added TLS 1.3 and new cipher suites for Windows Server 2022.Version 3.3 Build 17 - Released October 31, 2022 ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |