Microsoft.Policies.CypherStrength• Machine

ECC Curve Order

This policy setting determines the priority order of ECC curves used with ECDHE cipher suites. If you enable this policy setting, ECC curves are prioritized in the order specified.(Enter one Curve name per line) If you disable or do not configure this policy setting, the default ECC curve order is used. Default Curve Order ============ curve25519 NistP256 NistP384 To See all the curves supported on the system, Use the following command: CertUtil.exe -DisplayEccCurve

Policy Details

Policy Name: SSLCurveOrder
Registry Key: SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002
Supported On: At least Windows Server 2016, Windows 10
OMA-URI (CSP): ADMX_CipherSuiteOrder/SSLCurveOrder

OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite

Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages: en-us

Configuration Elements

Type the ECC curve names in the preferred order (one curve name per line)

ECC Curve Order:

Type: multiText