Prefer specific key exchange algorithms for TLS: registry value PreferSlowKexAlgorithms (Chrome)ComputerHKLM\Software\Policies\Google\Chrome
- Policy ID
- PreferSlowKexAlgorithms
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Windows 7 or later
- Source
- Google Chrome Policy Templates (version 156.0.8078.80)
- Category
- Google › Google Chrome › Cryptography compliance policies
Registry
PreferSlowKexAlgorithms
REG_SZComputerUser…\Software\Policies\Google\ChromeHKLM\Software\Policies\Google\Chrome Current key
HKCU\Software\Policies\Google\Chrome
HKCU\Software\Policies\Google\Chrome
- Enabled value
- Depends on the option value
- Element
- Prefer specific key exchange algorithms for TLS
| Item | Stored value |
|---|---|
| Prefer key exchange methods satisfying the requirements of CNSA 2.0 | cnsa2 |
| Use Google Chrome's default supported groups | default |
Apply with .reg · CMD · PowerShell
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome] ; Options (use only one) ; Prefer key exchange methods satisfying the requirements of CNSA 2.0 "PreferSlowKexAlgorithms"="cnsa2" ; Use Google Chrome's default supported groups "PreferSlowKexAlgorithms"="default"
CMD
:: Options (use only one) :: Prefer key exchange methods satisfying the requirements of CNSA 2.0 reg add "HKLM\Software\Policies\Google\Chrome" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "cnsa2" /f :: Use Google Chrome's default supported groups reg add "HKLM\Software\Policies\Google\Chrome" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Google\Chrome' -Force | Out-Null # Options (use only one) # Prefer key exchange methods satisfying the requirements of CNSA 2.0 New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'cnsa2' -Force | Out-Null # Use Google Chrome's default supported groups New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'default' -Force | Out-Null
UserPer-account setting
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Google\Chrome] ; Options (use only one) ; Prefer key exchange methods satisfying the requirements of CNSA 2.0 "PreferSlowKexAlgorithms"="cnsa2" ; Use Google Chrome's default supported groups "PreferSlowKexAlgorithms"="default"
CMD
:: Options (use only one) :: Prefer key exchange methods satisfying the requirements of CNSA 2.0 reg add "HKCU\Software\Policies\Google\Chrome" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "cnsa2" /f :: Use Google Chrome's default supported groups reg add "HKCU\Software\Policies\Google\Chrome" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Google\Chrome' -Force | Out-Null # Options (use only one) # Prefer key exchange methods satisfying the requirements of CNSA 2.0 New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'cnsa2' -Force | Out-Null # Use Google Chrome's default supported groups New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'default' -Force | Out-Null