ADMX Viewer
AddNetworkHard.Policies.AddNetworkHard• Machine

Diffie-Hellman Server-side Key Size

Download ADMX

Sets the minimum Diffie-Hellman ephemeral key size for TLS server. Please see Microsoft Security Advisory 3174644 for more information on DH modulus length. 4096 is the currently recommended minimum value.

Policy Details

Policy Name
DHServer
Registry Key
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman
Supported On
SUPPORTED_3174644
Available Languages
en-usfr-fr

Configuration Elements

Server side DH modulus minimum length:

Type: enum

Allowed Values
  • 2048 2048
  • 3072 3072
  • 4096 4096