====== Security ======

===== SSL/TLS support =====

TLS version support is enabled/disabled at the **machine** level using [[Windows Registry|registry]] settings. This means the settings apply to **all** services running on the machine.

<webcode name="Enable_TLS_on_Windows.reg" frameborder=0 externalResources="//gist.github.com/cmshawns/c725038381d593aefa10bd1ca231086c.js">
</webcode>

**References:**

  * [[https://tecadmin.net/enable-tls-on-windows-server-and-iis/|How to Enable TLS 1.1, TLS 1.2 on Windows Server]]
  * [[https://basics.net/2015/10/06/iis-7-5-how-to-enable-tls-1-1-and-tls-1-2/|How to Enable TLS 1.1 and TLS 1.2]]
  * [[https://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1.1-and-tls-1.2-as-a-default-secure-protocols-in-winhttp-in-windows|Update to enable TLS 1.1 and TLS 1.2 as a default secure protocols in WinHTTP in Windows]]
  * [[https://technet.microsoft.com/en-us/library/dn786418(v=ws.11).aspx|Schannel Security Support Provider Technical Reference > TLS/SSL Settings]]