Cannot disable cipher suite "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" in IIS / Windows Server 2022

Asked Apr 10 '22 at 05:24

Active Jul 26 '22 at 21:44

Viewed 141 times

I am using this command in Windows Server 2022, latest updates:

Disable-TlsCipherSuite -Name "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"

It completes without error. I then tried restarting IIS (and also the server).

But this cipher suite still shows up in SSL Labs. Is this suite part of the suite named "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"? Is that why it can't be turned off?

Any guidance would be greatly appreciated.

asked Apr 10 '22 at 05:24

A X

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 are different ciphers – Steffen Ullrich Apr 10 '22 at 06:12
@SteffenUllrich Thanks - so then how can I disable "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"? – A X Apr 10 '22 at 21:41

Cannot disable cipher suite "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" in IIS / Windows Server 2022

0 Answers0