TLS registry settings
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 8be9bd6 · +3 −0 lines · also on GitHub
⋯ 137 unchanged lines
138138
139139
To specify a minimum supported range of Diffie-Hellman key bit length for the TLS client, create a `ClientMinKeyBitLength` entry. After you create the entry, change the DWORD value to the desired bit length. If not configured, 1024 bits is the minimum.
140140
141
+To specify the Diffie-Helman key bit length for the TLS server default, create a `ServerMinKeyBitLength` entry. This entry does not exist in the registry by default. After you have created the entry, change the DWORD value to the desired bit length. If not configured, 2048 bits will be the default.
142
+
143
+
141144
# [RSA](#tab/rsa)
142145
143146
Added in Windows 10, version 1507, and Windows Server 2016.
⋯ 107 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:07 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.