Update to add new cipher suites to Internet Explorer and Microsoft Edge in Windows

Applies to: Windows Server 2012 R2 DatacenterWindows Server 2012 R2 StandardWindows Server 2012 R2 Essentials

About this update

This article describes an update in which new TLS cipher suites are added and cipher suite default priorities are changed in Windows RT 8.1, Windows 8.1, Windows Server 2012 R2, Windows 7, or Windows Server 2008 R2. These new cipher suites improve compatibility with servers that support a limited set of cipher suites.

Note This is changing the default priority list for the cipher suites. If you have deployed a Group Policy in your environment that has an updated cipher suite priority ordering, this update won't affect those computers where the Group Policy is deployed.

How to get this update


Microsoft has confirmed that this is an update in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.

More information

For more information about cipher suites, see Cipher Suites in Schannel.

To configure the SSL Cipher Suite Order Group Policy setting, follow these steps:
  1. At a command prompt, enter gpedit.msc, and then press Enter. The Local Group Policy Editor is displayed.
  2. Go to Computer Configuration > Administrative Templates > Network > SSL Configuration Settings.
  3. Under SSL Configuration Settings, select SSL Cipher Suite Order.
  4. In the SSL Cipher Suite Order pane, scroll to the bottom.
  5. Follow the instructions that are labeled How to modify this setting.
  • You have to restart the computer after you change this setting for the changes to take effect.
  • The list of cipher suites is limited to 1,023 characters.
  • Using Group Policy as described here is the supported method of updating the cipher suite priority ordering. Updating the registry settings for the default priority ordering isn't supported. If you change these registry settings, this update will reset them to the default settings.