PoshCode Archive  Artifact [4ab18ec3d2]

Artifact 4ab18ec3d2c062d434fe0c7703c2aa8fccf70ca19208d9ac22abac74072e9c00:

• File Disable-SSL3-Enable-TLS.ps1 — part of check-in [f5dc06cba3] at 2018-06-10 13:56:32 on branch trunk — Creates or updates registry keys to disable SSL3 and enable TLS 1.0, 1.1, 1.2 (user: anonymous size: 4582)

# encoding: ascii
# api: powershell
# title: Disable SSL3 Enable TLS
# description: Creates or updates registry keys to disable SSL3 and enable TLS 1.0, 1.1, 1.2
# version: 3.0
# type: function
# author: anonymous
# license: CC0
# function: Set-EnabledKey
# x-poshcode-id: 5519
# x-archived: 2016-01-11T20:39:43
# x-published: 2016-10-15T21:15:00
#
#
Function Set-EnabledKey([string]$KeyPath,[switch]$Disable)
{
    if($(Test-Path $KeyPath) -eq $false)
    { 
        md $KeyPath | Out-Null
        Write-Host "`tCreated: $KeyPath" -ForegroundColor Yellow
    }

    $_present = Get-ItemProperty $KeyPath -Name "Enabled" -ea 0

    if($_present -eq $null)
    {
        if($Disable)
        {
            New-ItemProperty -Path $KeyPath -Name "Enabled" -Value 0 -PropertyType "DWord" | Out-Null
            Write-Host "`t`tCreated: $(Join-Path $KeyPath "Enabled") = 0" -ForegroundColor Red
        }
        else
        {
            New-ItemProperty -Path $KeyPath -Name "Enabled" -Value 1 -PropertyType "DWord" | Out-Null
            Write-Host "`t`tCreated: $(Join-Path $KeyPath "Enabled") = 1" -ForegroundColor Green
        }
    }
    else
    {
        if($Disable)
        {
            Set-ItemProperty -Path $KeyPath -Name "Enabled" -Value "0" | Out-Null
            Write-Host "`t`tUpdated: $(Join-Path $KeyPath "Enabled") = 0" -ForegroundColor Red
        }
        else
        {
            Set-ItemProperty -Path $KeyPath -Name "Enabled" -Value "1" | Out-Null
            Write-Host "`t`tUpdated: $(Join-Path $KeyPath "Enabled") = 1" -ForegroundColor Green
        }
    }
} # End Set-EnabledKey Function

Function Set-DisabledByDefaultKey([string]$KeyPath,[switch]$Disable)
{
    if($(Test-Path $KeyPath) -eq $false)
    { 
        md $KeyPath | Out-Null
        Write-Host "`tCreated: $KeyPath" -ForegroundColor Yellow
    }

    $_present = Get-ItemProperty $KeyPath -Name "DisabledByDefault" -ea 0

    if($_present -eq $null)
    {
        if($Disable)
        {
            New-ItemProperty -Path $KeyPath -Name "DisabledByDefault" -Value 1 -PropertyType "DWord" | Out-Null
            Write-Host "`t`tCreated: $(Join-Path $KeyPath "DisabledByDefault") = 1" -ForegroundColor Red
        }
        else
        {
            New-ItemProperty -Path $KeyPath -Name "DisabledByDefault" -Value 0 -PropertyType "DWord" | Out-Null
            Write-Host "`t`tCreated: $(Join-Path $KeyPath "DisabledByDefault") = 0" -ForegroundColor Green
        }
    }
    else
    {
        if($Disable)
        {
            Set-ItemProperty -Path $KeyPath -Name "DisabledByDefault" -Value "1" | Out-Null
            Write-Host "`t`tUpdated: $(Join-Path $KeyPath "DisabledByDefault") = 1" -ForegroundColor Red
        }
        else
        {
            Set-ItemProperty -Path $KeyPath -Name "DisabledByDefault" -Value "0" | Out-Null
            Write-Host "`t`tUpdated: $(Join-Path $KeyPath "DisabledByDefault") = 0" -ForegroundColor Green
        }
    }
} # End Set-DisabledByDefaultKey Function

Function Set-ProtocolSettings([string]$BasePath,[switch]$Disable)
{
    if($(Test-Path $BasePath) -eq $false)
    { 
        md $BasePath | Out-Null
        Write-Host "`tCreated: $BasePath" -ForegroundColor Yellow
    }

    if($Disable)
    {
        Set-EnabledKey -KeyPath $(Join-Path $BasePath "Client") -Disable
        Set-EnabledKey -KeyPath $(Join-Path $BasePath "Server") -Disable
        Set-DisabledByDefaultKey -KeyPath $(Join-Path $BasePath "Client") -Disable
        Set-DisabledByDefaultKey -KeyPath $(Join-Path $BasePath "Server") -Disable
    }
    else
    {
        Set-EnabledKey -KeyPath $(Join-Path $BasePath "Client")
        Set-EnabledKey -KeyPath $(Join-Path $BasePath "Server")
        Set-DisabledByDefaultKey -KeyPath $(Join-Path $BasePath "Client")
        Set-DisabledByDefaultKey -KeyPath $(Join-Path $BasePath "Server")
    }
}
Write-Host "`n`tStarting...`n" -ForegroundColor Cyan
Set-ProtocolSettings -BasePath "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0" -Disable
Set-ProtocolSettings -BasePath "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0"
Set-ProtocolSettings -BasePath "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1"
Set-ProtocolSettings -BasePath "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2"
Write-Host "`n`tFinished. Reboot Required.`n" -ForegroundColor Cyan