11

how to enable TLS 1.3 in windows 10

5

2 Answers 2

26

Native SChannel implementation on Windows 10 and Windows 10 Server version 1903 (May 2019 Update) and newer supports TLS 1.3.

This is how you can enable it using registry for the client:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]
"DisabledByDefault"=dword:00000000 
"Enabled"=dword:00000001

This is how you can enable it using registry for the server:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server]
"DisabledByDefault"=dword:00000000 
"Enabled"=dword:00000001

Bear in mind that this will have no effect on any versions of Windows prior to 1903.

6
  • 2
    Note that this might cause connections to fail (at least for me) because SChannel does not indicate support for rsa_pss_rsae_* signatures in the signature_algorithms extension, causing the server to reply with handshake_failure. This is might be a bug but I'm not sure. It might also be a configuration error on my side, let me know if your PC does indicate support.
    – SWdV
    May 12, 2020 at 22:43
  • 1
    Note the Microsoft TLS 1.3 Support Reference says “TLS 1.3 is also supported on Windows 1903 as of release of this article for testing purposes only, not production environment.”
    – csrowell
    Jul 6, 2020 at 15:20
  • 2
    According to learn.microsoft.com/en-us/windows/win32/secauthn/…, there is no TLS 1.3 support yet. Maybe with some "Insider-Preview" but not by default.
    – k1ll3r8e
    Jun 17, 2021 at 4:50
  • 1
    For those looking to enable TLS 1.3 for with .NET 5+ on localhost, use the server registry key (your development environment acts as the server).
    – silkfire
    Jun 30, 2021 at 0:36
  • 1
    I tried this, and now I get this error: The Local Security Authority cannot be contacted - anyone know how to fix this?
    – Zeus82
    Jan 8, 2022 at 15:39
-4

Microsoft has not support TLS 1.3 see. You can use TLS 1.3 by installing OpenSSL.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.