ECC Curve Order
- Policy ID
- SSLCurveOrder
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Network › SSL Configuration Settings
Description
This policy setting determines the priority order of ECC curves used with ECDHE cipher suites.
If you enable this policy setting, ECC curves are prioritized in the order specified.(Enter one Curve name per line)
If you disable or do not configure this policy setting, the default ECC curve order is used.
Default Curve Order
============
curve25519
NistP256
NistP384
To See all the curves supported on the system, Use the following command:
CertUtil.exe -DisplayEccCurve
Options
Registry
ComputerHKEY_LOCAL_MACHINE
- EccCurvesREG_MULTI_SZ