SSL connections that are successful on earlier versions of Windows can fail in Windows 7

Article translations Article translations
Article ID: 980868 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

After you upgrade to Windows 7, some Secure Sockets Layer (SSL) connections may fail. These same SSL connections work with earlier versions of Windows. For example, when you use Windows Internet Explorer to establish a connection over SSL, you receive an error message that resembles the following:
Internet Explorer cannot display the Webpage

CAUSE

This issue occurs because changes were made to the default cipher suites that are used in Windows 7. If the host to which you are trying to set up an SSL connection requires an earlier version of the cipher suites, the SSL connection fails.

RESOLUTION

To resolve this issue, you must configure the SSL Cipher Suite Order Group Policy setting to add the appropriate cipher suite back into the default list of accepted suites. To do this, follow these steps:
  1. At a command prompt, type gpedit.msc, and then click OK. This starts the Local Group Policy Editor.
  2. Expand Computer Configuration, expand Administrative Templates, expand Network, and then click SSL Configuration Settings.
  3. In the Setting pane, right-click SSL Cipher Suite Order, and then click Edit.
  4. In the Help pane, scroll to the bottom of the pane to locate the "How to modify this setting" instructions. To add the missing cipher suites, follow these instructions.

MORE INFORMATION

For more information about how to prioritize cipher suites, visit the following MSDN article:
Adding, Removing, and Prioritizing Cipher Suites

Properties

Article ID: 980868 - Last Review: February 23, 2010 - Revision: 1.0
APPLIES TO
  • Windows 7 Enterprise
  • Windows 7 Home Basic
  • Windows 7 Home Premium
  • Windows 7 Professional
  • Windows 7 Ultimate
Keywords: 
kbssl kbtshoot kbexpertiseinter kbsurveynew kbprb KB980868

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com