How to manage SSL/TLS ciphers and protocols in Plesk for Windows?

Plesk for Windows kb: how-to ABT: Group B

Applicable to:

Plesk for Windows

Question

How to manage SSL/TLS ciphers and protocols in Plesk for Windows?
For example, disable insecure ciphers and enable more recent ones.

Answer

Note: Plesk does not provide build-in functionality to manage SSL/TLS ciphers on Windows server. Use Windows utilities or 3rd-party applications instead. TLS 1.3 is supported on Windows Server 2022 only.

Using Windows utilities

Connect to the server via RDP.
Go to Start > Edit group policy.
Go to Local Computer Policy > Computer Configuration > Administrative Template > Network > SSL Configuration Settings > SSL Cipher Suite Order.
Set option Enabled.
Edit SSL Cipher Suites in the line.
Press OK to apply changes.

Using a 3rd-party application

Connect to the server via RDP
Download free utility IIS Crypto and launch it
Open tab Schannel
Select the version of the protocol to enable/disable
Click Apply:
Reboot the server

Note: How to enable/disable particular TLS version in Plesk on Linux?

Comments

4 comments

Vetri Chelvan August 19, 2019 08:37

Hi,

We are using windows server 2012 and plesk web pro edition, I am trying to enable weak chiper suites using IISCrypto tool, but after disable when i check in sslabs or nmap tool, its says that weak chiper are still available. Can help please?

thanks,

Vetrichelvan

0

Comment actions Permalink
Maxim Krasikov August 20, 2019 08:17

Hello @Vetri Chelvan,

Please try using Windows Group Policy Editor utility.
The article has been updated and the information can be found in section "Using Windows utilities" above.

0

Comment actions Permalink
Vetri Chelvan August 28, 2019 03:38

Hello Maxim,

Thanks for your prompt response, I tried both the ways and restarted our server already, but still I do see weak cipher suites are available when i test by ssllabs.

Thanks,

Vetrichelvan

0

Comment actions Permalink
Julian Bonpland Mignaquy August 29, 2019 15:58

Hi @Vetri, I recommend double checking if the weak ciphers are still showing when testing the manual way in https://support.plesk.com/hc/en-us/articles/115004991834-How-to-check-what-SSL-TLS-versions-are-available-for-a-website-

If they are still shown please open a support ticket with us as follows https://support.plesk.com/hc/en-us/articles/213608509-How-to-submit-a-request-to-Plesk-support-

0

Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Articles in this section

Applicable to:

Question

Answer

Related articles