Prefer specific encryption cipher algorithms for TLS: registry value PreferSlowCiphers (Edge)UserHKCU\Software\Policies\Microsoft\Edge
- Policy ID
- PreferSlowCiphers
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Edge version 146, Windows 7 or later
- Source
- Microsoft Edge Policy Templates (version 155.0.4283.45)
- Category
- Microsoft Edge › Cryptography compliance policies
Registry
PreferSlowCiphers
REG_SZUserComputer…\Software\Policies\Microsoft\EdgeHKCU\Software\Policies\Microsoft\Edge Current key
HKLM\Software\Policies\Microsoft\Edge
HKLM\Software\Policies\Microsoft\Edge
- Enabled value
- Depends on the option value
- Element
- Prefer specific encryption cipher algorithms for TLS
| Item | Stored value |
|---|---|
| Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 | cnsa |
| Use Microsoft Edge's default cipher order | default |
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Edge] ; Options (use only one) ; Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 "PreferSlowCiphers"="cnsa" ; Use Microsoft Edge's default cipher order "PreferSlowCiphers"="default"
CMD
:: Options (use only one) :: Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 reg add "HKCU\Software\Policies\Microsoft\Edge" /v "PreferSlowCiphers" /t REG_SZ /d "cnsa" /f :: Use Microsoft Edge's default cipher order reg add "HKCU\Software\Policies\Microsoft\Edge" /v "PreferSlowCiphers" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Force | Out-Null # Options (use only one) # Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowCiphers' -PropertyType String -Value 'cnsa' -Force | Out-Null # Use Microsoft Edge's default cipher order New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowCiphers' -PropertyType String -Value 'default' -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge] ; Options (use only one) ; Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 "PreferSlowCiphers"="cnsa" ; Use Microsoft Edge's default cipher order "PreferSlowCiphers"="default"
CMD
:: Options (use only one) :: Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 reg add "HKLM\Software\Policies\Microsoft\Edge" /v "PreferSlowCiphers" /t REG_SZ /d "cnsa" /f :: Use Microsoft Edge's default cipher order reg add "HKLM\Software\Policies\Microsoft\Edge" /v "PreferSlowCiphers" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Force | Out-Null # Options (use only one) # Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowCiphers' -PropertyType String -Value 'cnsa' -Force | Out-Null # Use Microsoft Edge's default cipher order New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowCiphers' -PropertyType String -Value 'default' -Force | Out-Null