Posts

Showing posts with the label webserver

PCI Compliance, SSL, TLS and Crypto

 Poodle and SSL 3.0, TLS 1.2  In order to fix the Poodle issue; SSL 3.0 needs to be disabled. You'll loose an odd ancient Browser or 2 but it's just not worth it. FYi, this also enables TLS 1.2 and 1.1. Other protocols that should not be round are PCT 1.0 and SSL 2.0 Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server] "DisabledByDefault"=dword:00000001 "Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client] "DisabledByDefault"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentContr...

How to back up the IIS 7 Configuration

How to back up the IIS 7 Configuration Remember it used to be called a metabase? Open a command prompt with Run as Administrator then cd to %windir%\system32\inetsrv. appcmd add backup. The system will name it for you by using a date, time format and pop it in %windir%\system32\inetsrv\backup. Done.