Forum Discussion
Secure Client-Initiated Renegotiation fail
Hi, We've got a problem with the iis webserver on our windows server 2019. We got a penetration test with the followin error after a testssl check: Secure Client-Initiated Renegotiation VULNE...
Open Registry Editor (regedit.exe) and navigate to the next path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL
Create or modify a registry entry called DisableRenegoOnClient as a DWORD value. Set its value to 1 to disable client-initiated renegotiation. If the entry already exists, update its value.
Restart the Serve
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL
Create or modify a registry entry called DisableRenegoOnClient as a DWORD value. Set its value to 1 to disable client-initiated renegotiation. If the entry already exists, update its value.
Restart the Serve