AnsweredAssumed Answered

Disabling RC4: No changes take affect on IIS-Windows server 2012,2008

Question asked by Manoj Kakara on Jul 24, 2015
Latest reply on Jul 31, 2015 by Manoj Kakara

Hi,

 

We have tested our SSL certificate using SSL labs and the grade is capped to C as the Server supports RC4. We have made changes to the registry as well as used a tool called IIS crypto to make the changes.

 

I am so sure that RC4 is disabled at the registry end as well as IIS crypto's 'Best practices'.

 

But, there are no changes taken place when a test is performed. The SSL test still shows that RC4 is enabled. I have tried different SSL checkers and the result is the same.

 

We also need to enable the Forward secrecy on the system.

Outcomes