TLS and Schannel
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit e8c5330 · +24 −17 lines · also on GitHub
⋯ 2 unchanged lines
33
description: Learn about the TLS and SSL implementations in Windows using the Schannel Security Service Provider (SSP).
44
ms.topic: article
55
ms.assetid: 1b7b0432-1bef-4912-8c9a-8989d47a4da9
6
−ms.date: 05/16/2018
6
+ms.date: 10/25/2023
77
---
88
# TLS/SSL overview (Schannel SSP)
99
10
−>Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows 10
10
+>Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows 11, Windows 10
1111
12
−This topic for the IT professional introduces the TLS and SSL implementations in Windows using the Schannel Security Service Provider (SSP) by describing practical applications, changes in Microsoft's implementation, and software requirements, plus additional resources for Windows Server 2012 and Windows 8.
12
+This article is to introduce IT professionals to TLS and SSL implementations in Windows using the Schannel Security Service Provider (SSP) by describing practical applications, changes in Microsoft's implementation, software requirements, and other resources for Windows Server and client devices.
1313
14
−## <a name="BKMK_OVER"></a>Description
14
+## Description
15
+
1516
Schannel is a Security Support Provider (SSP) that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) Internet standard authentication protocols.
1617
1718
The Security Support Provider Interface (SSPI) is an API used by Windows systems to perform security-related functions including authentication. The SSPI functions as a common interface to several SSPs, including the Schannel SSP.
1819
19
−TLS versions 1.0, 1.1, and 1.2, SSL versions 2.0 and 3.0, as well as the Datagram Transport Layer Security \(DTLS\) protocol version 1.0, and the Private Communications Transport \(PCT\) protocol are based on public key cryptography. The Schannel authentication protocol suite provides these protocols. All Schannel protocols use a client/server model.
20
+TLS versions 1.0, 1.1, and 1.2, SSL versions 2.0 and 3.0, as well as the Datagram Transport Layer Security (DTLS) protocol version 1.0, and the Private Communications Transport (PCT) protocol are based on public key cryptography. The Schannel authentication protocol suite provides these protocols. All Schannel protocols use a client/server model.
2021
21
−## <a name="BKMK_APP"></a>Applications
22
+> [!NOTE]
23
+> TLS 1.0 and TLS 1.1 is being deprecated in Windows starting with Windows 11 September Insider Preview Build and later releases. To learn more, see [Disablement of TLS 1.0 and TLS 1.1 in Windows](/win32/secauthn/tls-10-11-deprecation).
24
+
25
+## Applications
26
+
2227
One problem when you administer a network is securing data that is being sent between applications across an untrusted network. You can use TLS and SSL to authenticate servers and client computers and then use the protocol to encrypt messages between the authenticated parties.
2328
2429
For example, you can use TLS/SSL for:
2530
26
−- SSL-secured transactions with an e-commerce website
27
−- Authenticated client access to an SSL-secured website
28
−- Remote access
29
−- SQL access
30
−- E-mail
31
+- SSL-secured transactions with an e-commerce website
32
+- Authenticated client access to an SSL-secured website
33
+- Remote access
34
+- SQL access
35
+- E-mail
3136
32
−## <a name="BKMK_SOFT"></a>Requirements
37
+## Requirements
38
+
3339
TLS and SSL protocols use a client/server model and are based on certificate authentication, which requires a public key infrastructure.
3440
35
−## <a name="BKMK_INSTALL"></a>Server Manager information
41
+## Server Manager information
42
+
3643
There are no configuration steps necessary to implement TLS, SSL or Schannel.
3744
38
−## Additional References ##
45
+## See also
3946
40
−- [The Schannel security package](/windows/desktop/com/schannel)
41
−- [Secure Channel](/windows/desktop/SecAuthN/secure-channel)
42
−- [Transport Layer Security Protocol](/windows/desktop/SecAuthN/transport-layer-security-protocol)
47
+- [The Schannel security package](/windows/desktop/com/schannel)
48
+- [Secure Channel](/windows/desktop/SecAuthN/secure-channel)
49
+- [Transport Layer Security Protocol](/windows/desktop/SecAuthN/transport-layer-security-protocol)
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 09:24 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.