Question
How to manage SSL/TLS ciphers and protocols in Plesk for Windows?
For example, disable insecure ciphers and enable more recent ones.
Answer
Note: Plesk does not provide build-in functionality to manage SSL/TLS ciphers on Windows server. Use Windows utilities or 3rd-party applications instead. TLS 1.3 is supported on Windows Server 2022 only.
Using Windows utilities
-
Connect to the server via RDP.
-
Go to Start > Edit group policy.
-
Go to Local Computer Policy > Computer Configuration > Administrative Template > Network > SSL Configuration Settings > SSL Cipher Suite Order.
-
Set option Enabled.
-
Edit SSL Cipher Suites in the line.
-
Press OK to apply changes.
Using a 3rd-party application
-
Connect to the server via RDP
-
Download free utility IIS Crypto and launch it
-
Open tab Schannel
-
Select the version of the protocol to enable/disable
-
Click Apply:
-
Reboot the server
Note: How to enable/disable particular TLS version in Plesk on Linux?