Generic SSL (PCT/TLS) Updates for IIS and Microsoft Internet Products

View products that this article applies to.

This article was previously published under Q148427

Expand all | Collapse all

SUMMARY

On July 17, 1998 Microsoft released an updated version of Schannel.dll. This latest version provides the following benefits:

Resolves the vulnerability in SSL (Secure Sockets Layer) discovered by Daniel Bleichenbacher of Bell Labs.
Banks outside the U.S. and Canada can now use extremely strong 128-bit encryption.
Eliminates the need for separate SGC and non-SGC versions of Schannel.dll.
Corrects the "Bad Password" error message
Includes an updated version of Sgcinst.exe that corrects the problem where SGCINST appears to execute but SGC does not work. For more information, please see the following article in the Microsoft Knowledge Base:
180018 (http://support.microsoft.com/kb/180018/EN-US/ ) SGCINST.EXE Appears to Execute but SGC Does Not Work

MORE INFORMATION

Schannel.dll is available at the following Internet location:

ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/ssl-fix/ (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/ssl-fix/)

The updated version of Schannel.dll is available in Windows NT version 4.0 Service Pack 4 and later. For additional information, please see the following article in the Microsoft Knowledge Base:

152734 (http://support.microsoft.com/kb/152734/EN-US/ ) How to Obtain the Latest Windows NT 4.0 Service Pack