Skip to content

Commit 81ccc61

Browse files
simeononsecuritysimeononsecurity
committed
Update Admx Files
1 parent c081a82 commit 81ccc61

7 files changed

Lines changed: 7202 additions & 0 deletions

File tree

‎PolicyDefinitions/chromium.admx‎

Lines changed: 3636 additions & 0 deletions
Large diffs are not rendered by default.

‎PolicyDefinitions/en-US/chromium.adml‎

Lines changed: 3464 additions & 0 deletions
Large diffs are not rendered by default.

‎PolicyDefinitions/en-US/msedge.adml‎

24.9 KB
Binary file not shown.

‎PolicyDefinitions/en-US/msedgeupdate.adml‎

638 Bytes
Binary file not shown.

‎PolicyDefinitions/en-US/schannel.adml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,13 @@ Changing this setting will require a restart of the computer before the setting
8080
Changing this setting will require a restart of the computer before the setting will take effect.
8181
</string>
8282

83+
<!-- TLSv1.3 -->
84+
<string id="TLSv13">TLS 1.3 [EXPERIMENTAL]</string>
85+
<string id="TLSv13_Help">Enables or disables the use of TLS 1.3. TLS 1.3 is without known security issues.
86+
87+
This setting is only compatible on Windows 10 1903 and above and does not require a reboot to take effect.
88+
</string>
89+
8390
<!-- DTLSv1.0 -->
8491
<string id="DTLSv10">DTLS 1.0</string>
8592
<string id="DTLSv10_Help">Enables or disables the use of DTLS 1.0. Windows 7 and Windows Server 2008 R2 and above.
@@ -415,13 +422,17 @@ TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P521
415422
<string id="dotnet4_Help">Enables or disables the use of TLS 1.1 and TLS 1.2 in .NET Framework 4.
416423

417424
If this setting is left unconfigured, TLS 1.1 and TLS 1.2 will be enabled by default for applications targeting .NET Framework 4.6 or higher and disabled otherwise.
425+
426+
https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls
418427
</string>
419428

420429
<!-- .NET Framework 2 -->
421430
<string id="dotnet2">.NET Framework 2 Strong Crypto</string>
422431
<string id="dotnet2_Help">Enables or disables the use of TLS 1.1 and TLS 1.2 in .NET Framework 2.
423432

424433
If this setting is left unconfigured, TLS 1.1 and TLS 1.2 will be disabled by default.
434+
435+
https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls
425436
</string>
426437

427438
</stringTable>
@@ -465,6 +476,10 @@ If this setting is left unconfigured, TLS 1.1 and TLS 1.2 will be disabled by de
465476
<presentation id="TLSv12">
466477
<checkBox refId="TLSv12_ClientCheckbox" defaultChecked="true">Enable Client-side TLS 1.2 (eg., Internet Explorer)</checkBox>
467478
<checkBox refId="TLSv12_ServerCheckbox" defaultChecked="true">Enable Server-side TLS 1.2 (eg., IIS)</checkBox>
479+
</presentation>
480+
<presentation id="TLSv13">
481+
<checkBox refId="TLSv13_ClientCheckbox" defaultChecked="true">Enable Client-side TLS 1.3 (eg., Edge)</checkBox>
482+
<checkBox refId="TLSv13_ServerCheckbox" defaultChecked="true">Enable Server-side TLS 1.3 (eg., IIS)</checkBox>
468483
</presentation>
469484
<presentation id="DTLSv10">
470485
<checkBox refId="DTLSv10_ClientCheckbox" defaultChecked="true">Enable Client-side DTLS 1.0 (eg., Internet Explorer)</checkBox>

‎PolicyDefinitions/msedge.admx‎

21 KB
Binary file not shown.

‎PolicyDefinitions/schannel.admx‎

Lines changed: 87 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -383,6 +383,53 @@
383383
</elements>
384384
</policy>
385385

386+
<!-- TLSv1.3 -->
387+
<policy name="TLSv13" class="Machine" displayName="$(string.TLSv13)"
388+
explainText="$(string.TLSv13_Help)"
389+
presentation="$(presentation.TLSv13)"
390+
key="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3">
391+
<parentCategory ref="Protocols" />
392+
<supportedOn ref="windows:SUPPORTED_Windows_10_0_RS6_NOSERVER" />
393+
<elements>
394+
<boolean id="TLSv13_ClientCheckbox" key="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" valueName="Enabled">
395+
<trueList defaultKey="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client">
396+
<item valueName="Enabled">
397+
<value><decimal value="1" /></value>
398+
</item>
399+
<item valueName="DisabledByDefault">
400+
<value><decimal value="0" /></value>
401+
</item>
402+
</trueList>
403+
<falseList defaultKey="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client">
404+
<item valueName="Enabled">
405+
<value><decimal value="0" /></value>
406+
</item>
407+
<item valueName="DisabledByDefault">
408+
<value><decimal value="1" /></value>
409+
</item>
410+
</falseList>
411+
</boolean>
412+
<boolean id="TLSv13_ServerCheckbox" key="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server" valueName="Enabled">
413+
<trueList defaultKey="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server">
414+
<item valueName="Enabled">
415+
<value><decimal value="1" /></value>
416+
</item>
417+
<item valueName="DisabledByDefault">
418+
<value><decimal value="0" /></value>
419+
</item>
420+
</trueList>
421+
<falseList defaultKey="SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server">
422+
<item valueName="Enabled">
423+
<value><decimal value="0" /></value>
424+
</item>
425+
<item valueName="DisabledByDefault">
426+
<value><decimal value="1" /></value>
427+
</item>
428+
</falseList>
429+
</boolean>
430+
</elements>
431+
</policy>
432+
386433
<!-- DTLSv1.0 -->
387434
<policy name="DTLSv10" class="Machine" displayName="$(string.DTLSv10)"
388435
explainText="$(string.DTLSv10_Help)"
@@ -897,6 +944,16 @@
897944
<decimal value="1" />
898945
</value>
899946
</item>
947+
<item key="SOFTWARE\Microsoft\.NETFramework\v4.0.30319" valueName="SystemDefaultTlsVersions">
948+
<value>
949+
<decimal value="1" />
950+
</value>
951+
</item>
952+
<item key="SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319" valueName="SystemDefaultTlsVersions">
953+
<value>
954+
<decimal value="1" />
955+
</value>
956+
</item>
900957
</enabledList>
901958
<disabledList>
902959
<item key="SOFTWARE\Microsoft\.NETFramework\v4.0.30319" valueName="SchUseStrongCrypto">
@@ -909,6 +966,16 @@
909966
<decimal value="0" />
910967
</value>
911968
</item>
969+
<item key="SOFTWARE\Microsoft\.NETFramework\v4.0.30319" valueName="SystemDefaultTlsVersions">
970+
<value>
971+
<decimal value="0" />
972+
</value>
973+
</item>
974+
<item key="SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319" valueName="SystemDefaultTlsVersions">
975+
<value>
976+
<decimal value="0" />
977+
</value>
978+
</item>
912979
</disabledList>
913980
</policy>
914981

@@ -929,6 +996,16 @@
929996
<decimal value="1" />
930997
</value>
931998
</item>
999+
<item key="SOFTWARE\Microsoft\.NETFramework\v2.0.50727" valueName="SystemDefaultTlsVersions">
1000+
<value>
1001+
<decimal value="1" />
1002+
</value>
1003+
</item>
1004+
<item key="SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727" valueName="SystemDefaultTlsVersions">
1005+
<value>
1006+
<decimal value="1" />
1007+
</value>
1008+
</item>
9321009
</enabledList>
9331010
<disabledList>
9341011
<item key="SOFTWARE\Microsoft\.NETFramework\v2.0.50727" valueName="SchUseStrongCrypto">
@@ -941,6 +1018,16 @@
9411018
<decimal value="0" />
9421019
</value>
9431020
</item>
1021+
<item key="SOFTWARE\Microsoft\.NETFramework\v2.0.50727" valueName="SystemDefaultTlsVersions">
1022+
<value>
1023+
<decimal value="0" />
1024+
</value>
1025+
</item>
1026+
<item key="SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727" valueName="SystemDefaultTlsVersions">
1027+
<value>
1028+
<decimal value="0" />
1029+
</value>
1030+
</item>
9441031
</disabledList>
9451032
</policy>
9461033
</policies>

0 commit comments

Comments
 (0)