RC4 cipher is no longer supported in Internet Explorer 11 or Microsoft Edge
There is consensus across the industry that the RC4 cipher is no longer cryptographically secure, and therefore RC4 support is being removed with this update. With this change, Microsoft Edge and Internet Explorer 11 are aligned with the most recent versions of Google Chrome and Mozilla Firefox.
About this update
For detailed information about RC4 cipher removal in Microsoft Edge and Internet Explorer 11, see RC4 will no longer be supported in Microsoft Edge and IE11.
If you want to turn on RC4 support, see details in the More information section.
How to get this update
For Internet Explorer 11 in Windows 8.1 or Windows 7Install the most recent cumulative security update for Internet Explorer. To do this, go to Microsoft Update. Additionally, see the technical information about the most recent cumulative security update for Internet Explorer.
Note This update was first included in the MS16-095: Security update for Internet Explorer: August 9, 2016.
For Internet Explorer 11 and Microsoft Edge in Windows 10To have this change apply for Internet Explorer 11 and Microsoft Edge in Windows 10 or Windows 10 version 1511, you must install one of the following updates:
Update any servers that rely on RC4 ciphers to a more secure cipher suite, which you can find in the most recent priority list of ciphers.
If you have the need to do so, you can turn on RC4 support by enabling SSL3. To have us do this for you, go to the "Here's an easy fix" section. If you prefer to do this manually, go to the "Let me fix it myself" section.
Note (risk): Using this workaround increases your risk, as the RC4 ciphers are considered insecure, and SSL3 as a whole was disabled by default with the April 2015 security updates for Internet Explorer because of known vulnerabilities. We consider this workaround a last resort, and you should either update the server or request that the server owner update the list of supported cipher suites in compliance with Update to add new cipher suites to Internet Explorer and Microsoft Edge in Windows (KB3161639).
Here's an easy fixTo turn on RC4 support automatically, click the Download button. In the File Download dialog box, click Run or Open, and then follow the steps in the easy fix wizard.
- This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
- If you are not on the computer that has the problem, save the easy fix solution to a flash drive or a CD and then run it on the computer that has the problem.
Let me fix it myselfImportant Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur.
You can also turn on RC4 support by enabling SSL3 in either settings or through the registry manually.
Method 1: Internet Options settingsTo turn on SSL3 in Microsoft Edge or Internet Explorer through settings, follow these steps (be aware that the Microsoft Edge uses the Internet Explorer 11 settings; there is no way to do this in the Microsoft Edge UI):
- Start Internet Explorer.
- Go to Internet Options > Advanced > Settings > Security > Use SSL 3.0.
Method 2: Registry EditorTo turn on SSL3 through the registry:
- Start Registry Editor to modify the registry entry:
- In Windows 10, go to Start, enter regedit in the Search Windows box, and then select regedit.exe in the search results.
- In Windows 8.1, move your mouse to the upper-right corner, click Search, type regedit in the search text box, and then click regedit.exe in the search results.
- Locate and then select the following registry entry:Note If you don’t have SecureProtocols registry entry added, you can follow these steps:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols
- Locate and then select the following registry subkey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- On the Edit menu, point to New, and then click DWORD Value.
- Type SecureProtocols, and then press Enter.
- Locate and then select the following registry subkey:
- Change the current SecureProtocols value by setting the fifth bit to 1.
For example, if the current value is "0x0a80," setting the fifth bit of "0x0a80" will produce the value "0x0aa0" ("0x0a80 | 0x0020 = 0x0aa0").
Learn about the terminology that Microsoft uses to describe software updates.
ID do Artigo: 3151631 - Última Revisão: 10/25/2016 05:12:00 - Revisão: 5.0
Internet Explorer 11
- kbqfe kbsurveynew kbfix kbexpertiseinter KB3151631