To disable TLS 1.0 for both Server (inbound) and Client (outbound) connections on an Exchange Server perform the following:
1. From Notepad.exe, create a text file named TLS10-Disable.reg.
2. Copy and paste the following text into the file.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client]
“DisabledByDefault”=dword:00000001
“Enabled”=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]
“DisabledByDefault”=dword:00000001
“Enabled”=dword:00000000
3. Save TLS10-Disable.reg.
4. Double click the TLS10-Disable.reg file.
5. Click Yes to update your Windows Registry with these changes.
6. Restart the machine for the changes to take effect.
To disable TLS 1.1 for both Server (inbound) and Client (outbound) connections on an Exchange Server please perform the following:
1. From Notepad.exe, create a text file named TLS11-Disable.reg.
2. Copy and paste the following text into the file.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
“DisabledByDefault”=dword:00000001
“Enabled”=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]
“DisabledByDefault”=dword:00000001
“Enabled”=dword:00000000
3. Save TLS11-Disable.reg.
4. Double click the TLS11-Disable.reg file.
5. Click Yes to update your Windows Registry with these changes.
6. Restart the machine for the changes to take effect.