How to enable TLS 1.1 on your Windows device
Registry Commands
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" /f /v DisabledByDefault /t Reg_DWORD /d 0
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" /f /v Enabled /t Reg_DWORD /d 4294967295
PowerShell Script
cls
$reg = Get-Item HKLM:
$key = 'SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols'
$subkey = ("TLS 1.1")
$key = $reg.OpenSubKey($key,$true)
$key.CreateSubKey($subkey)
$reg = Get-Item HKLM:
$key = 'SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1'
$subkey = ("Server")
$key = $reg.OpenSubKey($key,$true)
$key.CreateSubKey($subkey)
#KEY1
$RegistryPath = 'HKLM:SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server'
$RegistryKey = "DisabledByDefault"
$KeyValue = 0
if ((Test-Path -Path $RegistryPath))
{
(New-ItemProperty -Path $RegistryPath -Name $RegistryKey -Value $KeyValue -PropertyType DWORD -Force)
}
$RegistryKey = "Enabled"
$KeyValue = 4294967295
if ((Test-Path -Path $RegistryPath))
{
(New-ItemProperty -Path $RegistryPath -Name $RegistryKey -Value $KeyValue -PropertyType DWORD -Force)
}
You should test any changes before rolling these out across the enterprise.