Skip to main content

Abacus: Certificate issues regarding TLS

Protocols TLS 1.0 and TLS 1.1 are still supported. Disable TLS 1.0 and TLS 1.1.

D
Written by David Bayley-Hamilton
Updated this week

Solution

If the hosted Abacus server supports TLS 1.0 and TLS 1.1 then these will need disabling for security reasons. Old TLS protocols can be disabled in Windows by updating the Windows registry. Follow these simple instructions in order.

Note: Before making any changes to the registry please ensure a backup is taken beforehand.

Open registry utility

To make your changes, you’ll need to open the registry utility.

  1. Click start, then type run.

  2. In the run box, type regedit, then click OK.

  3. Navigate to this path: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

Create key records

The next step is to create your key records.

  1. Right-click Protocols.

  2. Point to New, then click Key.

  3. Rename your key as TLS 1.0.

  4. Create another registry key client under your TLS 1.0 key so it looks like this screenshot.

    Step4
  5. Right-click on Client.

  6. Point to New, then DWORD (32-bit) Value.

  7. Rename the DWORD (32-bit) Value to Enable.

  8. Create another item, DisabledByDefault, underneath TLS 1.0.

  9. Set the DisabledByDefault hexadecimal value to 1.

  10. Repeat steps four to nine to create Server and corresponding keys.

To disable TLS 1.1 on the Windows server, follow these steps, creating TLS 1.1 and corresponding keys.

To finalise your settings, restart your Windows server.

Did this answer your question?