ADMX Viewer
Microsoft.Policies.InternetExplorer• Both

Turn off encryption support

This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match. If you enable this policy setting, the browser negotiates or does not negotiate an encryption tunnel by using the encryption methods that you select from the drop-down list. If you disable or do not configure this policy setting, the user can select which encryption method the browser supports. Note: SSL 2.0 is off by default and is no longer supported starting with Windows 10 Version 1607. SSL 2.0 is an outdated security protocol, and enabling SSL 2.0 impairs the performance and functionality of TLS 1.0.

Policy Details

Policy Name
Advanced_SetWinInetProtocols
Registry Key
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Supported On
At least Internet Explorer 8.0
OMA-URI (CSP)
InternetExplorer/DisableEncryptionSupport
OS Build Version:10.0.15063
CSP Version:5.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Secure Protocol combinations

Type: enum

Allowed Values
  • 0 Use no secure protocols
  • 8 [Obsolete] Only use SSL 2.0
  • 32 Only use SSL 3.0
  • 40 [Obsolete] Use SSL 2.0 and SSL 3.0
  • 128 Only use TLS 1.0
  • 136 [Obsolete] Use SSL 2.0 and TLS 1.0
  • 160 Use SSL 3.0 and TLS 1.0
  • 168 [Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.0
  • 512 Only use TLS 1.1
  • 520 [Obsolete] Use SSL 2.0 and TLS 1.1
  • 544 Use SSL 3.0 and TLS 1.1
  • 552 [Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.1
  • 640 Use TLS 1.0 and TLS 1.1
  • 648 [Obsolete] Use SSL 2.0, TLS 1.0, and TLS 1.1
  • 672 Use SSL 3.0, TLS 1.0, and TLS 1.1
  • 680 [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1
  • 2048 Only use TLS 1.2
  • 2056 [Obsolete] Use SSL 2.0 and TLS 1.2
  • 2080 Use SSL 3.0 and TLS 1.2
  • 2088 [Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.2
  • 2176 Use TLS 1.0 and TLS 1.2
  • 2184 [Obsolete] Use SSL 2.0, TLS 1.0, and TLS 1.2
  • 2208 Use SSL 3.0, TLS 1.0, and TLS 1.2
  • 2216 [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2
  • 2560 Use TLS 1.1 and TLS 1.2
  • 2568 [Obsolete] Use SSL 2.0, TLS 1.1, and TLS 1.2
  • 2592 Use SSL 3.0, TLS 1.1, and TLS 1.2
  • 2600 [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2
  • 2688 Use TLS 1.0, TLS 1.1, and TLS 1.2
  • 2696 [Obsolete] Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2
  • 2720 Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2
  • 2728 [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2
  • 8192 Only use TLS 1.3
  • 10240 Use TLS 1.2 and TLS 1.3
  • 10752 Use TLS 1.1, TLS 1.2, and TLS 1.3
  • 10880 Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3
  • 10912 Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3