I have read, reread and reread your advice with great attention. (You seemed to have disabled the DHE ones.) Your certificate unfortunately does not qualify. So before claiming 'it does not help', make some efforts to fully understand what's being discussed here. If you are using a RSA certificate, those ciphers are not used. The first 3 ciphers listed above are ECDSA ciphers and need an ECDSA certificate with an ECC public key.

The following cipher suites supports AEAD encryption on Windows Server 2012 R2: Please read that article carefully, as it says,Ĭiphers available on Windows Server 2012 R2 My certificates are RapidSSL RSA Ca 2018 using AES_256_CBC, with HMAC-SHA1 for message authentication and ECDHE_RSA as the main key exchange mechanism and the connection uses TLS 1.2. Problem to date has not yet been solved, as the message on the use of obsolete cryptographic packages is still present. ' which makes me think that it is an inherent problem of Windows Server 2012 R2, also because the original However, the Cipher streght still remainsĬritical, as the site gives me the following warning: 'This server does not support Authenticated encryption (AEAD) cipher suites.' Grade capped to B. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256,Ī new test showed a global improvement in the situation, guaranteeing me a rank B with a significant increase in the level of the Protocol support. And so at last the installed ciphers were: The site's rating on SSL Test was always and everywhere C and I always had the message that the certificateĪt that point, based on the results of reting, I disabled the SSL 3 service and deleted some encryption packages marked as weak. I did the update but I did not have any results.

(which are the same ones that Microsoft recommends). I was then suggested by the TechNet forum to install the certificates I found on the page The certificate vendor told me that the problem was not in the certificate but in the system ciphers. Installing the SSL certificates on my Windows Server 2012 R2 Standard with IIS 8.5 I found myself having the following message when I went to see the specifications of the certificate installed on theīrowser: 'The connection to is encrypted via an encryption package obsolete'.

How to convert .gcm to iso