Windows - how to disable specific cipher

By kimot, 13 February, 2025

If you want to display enabled Ciphers on server you can run this command in PowerShell:

Get-TlsCipherSuite

or modification with specific string in Cipher :

Get-TlsCipherSuite CBC3

Then you can disable specific Cipher :

Disable-TlsCipherSuite -Name "DES_CBC3_SHA"

or enable it :

Enable-TlsCipherSuite -Name "DES_CBC3_SHA"