You are currently offline, waiting for your internet to reconnect

RC4 is no longer supported in Internet Explorer 11 or Microsoft Edge

About this update
There is consensus across the industry that the RC4 cipher is no longer cryptographically secure, and therefore RC4 support is being removed with this update. With this change, Microsoft Edge and Internet Explorer 11 are aligned with the most recent versions of Google Chrome and Mozilla Firefox.
How to get this update

For Internet Explorer 11 in Windows 8.1 

Install the most recent cumulative security update for Internet Explorer. To do this, go to Microsoft Update. Additionally, see the technical information about the most recent cumulative security update for Internet Explorer.

Note This update was first included in the MS16-095: Security update for Internet Explorer: August 9, 2016.

For Internet Explorer 11 and Microsoft Edge in Windows 10 

To have this change apply for Internet Explorer 11 and Microsoft Edge in Windows 10 or Windows 10 version 1511, you must also install one of the following updates:
More information
For detailed information about RC4 removal in Microsoft Edge and Internet Explorer 11, see RC4 will no longer be supported in Microsoft Edge and IE11.
Workaround
Update any servers that rely on RC4 ciphers to a more secure cipher suite, which you can find in the most recent priority list of ciphers.

If you have the need to do so, you can turn on RC4 support by enabling SSL3 in either settings or through the registry.

Note (risk): Using this workaround increases your risk, as the RC4 ciphers are considered insecure, and SSL3 as a whole was disabled by default with the April 2015 security updates for Internet Explorer because of known vulnerabilities. We consider this workaround a last resort, and you should either update the server or request that the server owner update the list of supported cipher suites in compliance with Update to add new cipher suites to Internet Explorer and Microsoft Edge in Windows (KB3161639).

To turn on SSL3 in Microsoft Edge or Internet Explorer through settings, follow these steps (be aware that the Microsoft Edge uses the Internet Explorer 11 settings; there is no way to do this in the Edge UI):
  1. Start Internet Explorer.
  2. Go to Internet Options.
  3. On the Advanced tab, select Use SSL 3.0.
Then, follow these steps to modify the registry:
  1. In Registry Editor, locate and then select the following subkey:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols
  2. Change the current SecureProtocols value by setting the fifth bit to 1.

    For example, if the current value is "0x0a80," setting the fifth bit of "0x0a80" will produce the value "0x0aa0" ("0x0a80 | 0x0020 = 0x0aa0").
References
Learn about the terminology that Microsoft uses to describe software updates.
Properties

Article ID: 3151631 - Last Review: 08/12/2016 04:41:00 - Revision: 3.0

Internet Explorer 11

  • kbqfe kbsurveynew kbfix kbexpertiseinter KB3151631
Feedback