Disabling RC4

RC4 is a stream cipher for bulk encryption that nowadays is considered as practically vulnerable and was officially deprecated by Internet Engineering Task Force.

  1. Open registry editor:

    Win + R > regedit

  2. Navigate to:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Ciphers

  3. Right-click on “Ciphers” > New > Key

    Hardening_14.jpg

    Name the key “RC4 40/128”

  4. Right-click on “RC4 40/128” > New > DWORD (32-bit) Value

    Hardening_15.jpg

    Name the value “Enabled”

  5. Double-click the created “Enabled” value and make sure that there is zero (0) in ”Value Data:” field > click “OK”

    Hardening_16.jpg

  6. Create two more keys with the names “RC4 56/128” and “RC4 128/128” in the “Ciphers” directory. Repeat steps 4 and 5 for each of them.
  7. After step 6 is completed, you should have three keys for RC4 in total in Ciphers. Each RC4 key should have the “DWORD” value named “Enabled” with zero (0) value data.

    Hardening_17.jpg

  8. You may need to restart Windows Server to apply the changes.
  • 0 Els usuaris han Trobat Això Útil
Ha estat útil la resposta?

Articles Relacionats

SHA-2 server and browser compatibility

In the nearest future all trusted certificates within the industry will be signed with the SHA-2...

What is an ECC (Elliptic Curve Cryptography) certificate?

The situation in information security field is constantly changing. Hack attempts are becoming...

What is the difference between very high, high, medium and low assurance certificates?

The level of the assurance mostly depends on the certificate validation type, the amount of the...

Your site shows 256-bit encryption and my site shows 128-bit, why?

During an SSL/TLS session there are two types of encryption in use: symmetric and asymmetric....

27 Months Maximum Certificate Validity

Starting March 1, 2018, all SSL certificates will have a maximum validity of 27 months. This new...