How to enable TLS1.1/TLS1.2 on IIS server

Recently, the SSL certificate of my Alibaba Cloud ESC server expired. After redeployment, it was found that when the browser was opened, an insecure connection was indicated on the left side of the address bar.

After half a day of research, I came to the conclusion that my server's IIS version is relatively old, and the TLS1.0 encryption method is still used. The browser considers it "fragile encryption". The solution is:

1. Solve it by installing the IIS Crypto tool. The installation method is as follows:

Download the IIS Crypto tool.

Download address: https://pan.baidu.com/s/1STG31WCKe-617qD_Djp5AA

Extraction code: svre

After downloading, unzip it, click IISCrypto.exe directly to install it, and check it in the following way, as shown in the figure below:

1.png

Click Apply to set, and then restart the server.

Guess you like

Origin blog.csdn.net/tianhai110/article/details/112410270