Search code examples
windowspowershellsslinternet-explorertls1.2

Enable and Disable TLS and SSL in IE on windows 10 local machine(not windows server) using powershell

I've been reading some articles and Microsoft docs and looking at some StackOverflow questions to change/toggle tls and ssl settings in internet explorer(IE) in Advanced Tab but these scripts got me nowhere. Till now I've tried Enable TLS and Disable SSL via PowerShell script

https://medium.com/think-stack/disabling-tls-1-0-on-your-workstations-eb8377a2bd09

and some other scripts which have pointed me to the same directory.

A registry is being made at that path but tls and ssl settings do not change.

Please, help me where am I making mistake. Thanks in advance.

Picture of tls and ssl settings of IE browser

Solution

  • The reg key for IE TLS and SSL setting is under this path:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

    enter image description here

    The reg key is SecureProtocols. Each protocol you circle in the picture modifies the same registry key, the DWORD value will be a hexadecimal sum of the decimal value of each check box. You can check/uncheck the options in IE setting to observe how the SecureProtocols value is changing.

    For example, if you want to check all the options, the value should be 0x00002aa0 (10912). The PowerShell script should be like this:

    Set-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings' -name 'SecureProtocols' -value '0x00002aa0' -Type DWord
Write-Host 'Enable All'

    The other situations are similar, you just need to change the value of the reg key.