Group Policy SearchGroup Policy Search
English

Turn off encryption support

Policy ID
Advanced_SetWinInetProtocols
Scope
Computer Configuration, User Configuration
Supported on
At least Internet Explorer 8.0
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Internet Explorer › Internet Control Panel › Advanced Page

Description

This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match.

If you enable this policy setting, the browser negotiates or does not negotiate an encryption tunnel by using the encryption methods that you select from the drop-down list.

If you disable or do not configure this policy setting, the user can select which encryption method the browser supports.

Note: SSL 2.0 is off by default and is no longer supported starting with Windows 10 Version 1607. SSL 2.0 is an outdated security protocol, and enabling SSL 2.0 impairs the performance and functionality of TLS 1.0.

Options

  • Secure Protocol combinations
    • Use no secure protocols
    • [Obsolete] Only use SSL 2.0
    • Only use SSL 3.0
    • [Obsolete] Use SSL 2.0 and SSL 3.0
    • Only use TLS 1.0
    • [Obsolete] Use SSL 2.0 and TLS 1.0
    • Use SSL 3.0 and TLS 1.0
    • [Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.0
    • Only use TLS 1.1
    • [Obsolete] Use SSL 2.0 and TLS 1.1
    • Use SSL 3.0 and TLS 1.1
    • [Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.1
    • Use TLS 1.0 and TLS 1.1
    • [Obsolete] Use SSL 2.0, TLS 1.0, and TLS 1.1
    • Use SSL 3.0, TLS 1.0, and TLS 1.1
    • [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1
    • Only use TLS 1.2
    • [Obsolete] Use SSL 2.0 and TLS 1.2
    • Use SSL 3.0 and TLS 1.2
    • [Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.2
    • Use TLS 1.0 and TLS 1.2
    • [Obsolete] Use SSL 2.0, TLS 1.0, and TLS 1.2
    • Use SSL 3.0, TLS 1.0, and TLS 1.2
    • [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2
    • Use TLS 1.1 and TLS 1.2
    • [Obsolete] Use SSL 2.0, TLS 1.1, and TLS 1.2
    • Use SSL 3.0, TLS 1.1, and TLS 1.2
    • [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2
    • Use TLS 1.0, TLS 1.1, and TLS 1.2
    • [Obsolete] Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2
    • Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2
    • [Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2
    • Only use TLS 1.3
    • Use TLS 1.2 and TLS 1.3
    • Use TLS 1.1, TLS 1.2, and TLS 1.3
    • Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3
    • Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3

Registry

ComputerHKEY_LOCAL_MACHINE
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet SettingsView registry values
  • SecureProtocolsREG_DWORD
UserHKEY_CURRENT_USER
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet SettingsView registry values
  • SecureProtocolsREG_DWORD

Other policies in the same category

View all policies in this category (29)