how to enable TLS 1.3 in windows 10
-
1Have a look here : learn.microsoft.com/en-us/windows-server/security/tls/… how to enable it– Jayoti ParkashMay 10, 2019 at 7:23
-
@JayotiParkash nope, that link is not updated with TLS 1.3, latest TLS there is 1.2– CleptusMay 10, 2019 at 7:32
-
@bradbury9 I need TLS 1.3– JohnMathewMay 10, 2019 at 7:35
-
1Microsoft has not yet implemented it in Windows, so you should check third party implementations social.technet.microsoft.com/Forums/en-US/…– CleptusMay 10, 2019 at 7:38
-
looking for TLS1.3 in windows server 2012– JohnMathewMay 10, 2019 at 8:17
2 Answers
Native SChannel implementation on Windows 10 and Windows 10 Server version 1903 (May 2019 Update) and newer supports TLS 1.3.
This is how you can enable it using registry for the client:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001
This is how you can enable it using registry for the server:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001
Bear in mind that this will have no effect on any versions of Windows prior to 1903.
-
2Note that this might cause connections to fail (at least for me) because SChannel does not indicate support for
rsa_pss_rsae_
* signatures in thesignature_algorithms
extension, causing the server to reply withhandshake_failure
. This is might be a bug but I'm not sure. It might also be a configuration error on my side, let me know if your PC does indicate support.– SWdVMay 12, 2020 at 22:43 -
1Note the Microsoft TLS 1.3 Support Reference says “TLS 1.3 is also supported on Windows 1903 as of release of this article for testing purposes only, not production environment.”– csrowellJul 6, 2020 at 15:20
-
2According to learn.microsoft.com/en-us/windows/win32/secauthn/…, there is no TLS 1.3 support yet. Maybe with some "Insider-Preview" but not by default.– k1ll3r8eJun 17, 2021 at 4:50
-
1For those looking to enable TLS 1.3 for with .NET 5+ on localhost, use the server registry key (your development environment acts as the server).– silkfireJun 30, 2021 at 0:36
-
1I tried this, and now I get this error:
The Local Security Authority cannot be contacted
- anyone know how to fix this?– Zeus82Jan 8, 2022 at 15:39
Microsoft has not support TLS 1.3 see. You can use TLS 1.3 by installing OpenSSL.