Prefer specific key exchange algorithms for TLS: registry value PreferSlowKexAlgorithms (Edge)ComputerHKLM\Software\Policies\Microsoft\Edge
- Policy ID
- PreferSlowKexAlgorithms
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Edge version 146, Windows 7 or later
- Source
- Microsoft Edge Policy Templates (version 155.0.4283.45)
- Category
- Microsoft Edge › Cryptography compliance policies
Registry
PreferSlowKexAlgorithms
REG_SZComputerUser…\Software\Policies\Microsoft\EdgeHKLM\Software\Policies\Microsoft\Edge Current key
HKCU\Software\Policies\Microsoft\Edge
HKCU\Software\Policies\Microsoft\Edge
- Enabled value
- Depends on the option value
- Element
- Prefer specific key exchange algorithms for TLS
| Item | Stored value |
|---|---|
| Prefer key exchange methods satisfying the requirements of CNSA 2.0 | cnsa2 |
| Use Microsoft Edge's default supported groups | default |
Apply with .reg · CMD · PowerShell
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge] ; Options (use only one) ; Prefer key exchange methods satisfying the requirements of CNSA 2.0 "PreferSlowKexAlgorithms"="cnsa2" ; Use Microsoft Edge's default supported groups "PreferSlowKexAlgorithms"="default"
CMD
:: Options (use only one) :: Prefer key exchange methods satisfying the requirements of CNSA 2.0 reg add "HKLM\Software\Policies\Microsoft\Edge" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "cnsa2" /f :: Use Microsoft Edge's default supported groups reg add "HKLM\Software\Policies\Microsoft\Edge" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Force | Out-Null # Options (use only one) # Prefer key exchange methods satisfying the requirements of CNSA 2.0 New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'cnsa2' -Force | Out-Null # Use Microsoft Edge's default supported groups New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'default' -Force | Out-Null
UserPer-account setting
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Edge] ; Options (use only one) ; Prefer key exchange methods satisfying the requirements of CNSA 2.0 "PreferSlowKexAlgorithms"="cnsa2" ; Use Microsoft Edge's default supported groups "PreferSlowKexAlgorithms"="default"
CMD
:: Options (use only one) :: Prefer key exchange methods satisfying the requirements of CNSA 2.0 reg add "HKCU\Software\Policies\Microsoft\Edge" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "cnsa2" /f :: Use Microsoft Edge's default supported groups reg add "HKCU\Software\Policies\Microsoft\Edge" /v "PreferSlowKexAlgorithms" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Force | Out-Null # Options (use only one) # Prefer key exchange methods satisfying the requirements of CNSA 2.0 New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'cnsa2' -Force | Out-Null # Use Microsoft Edge's default supported groups New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'PreferSlowKexAlgorithms' -PropertyType String -Value 'default' -Force | Out-Null