IE SSL / TLS

This post is the continuation of IE Exceptions Trusted Sites and IE Exceptions Privacy

The value for this key should be calculated as needed, for this example we will activate SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2

Note: One of the last updates of Internet Explorer add a new option TLS 1.3 
DefaultSecureProtocols Value Protocol enabled
0x00000008 Enable SSL 2.0 by default
0x00000020 Enable SSL 3.0 by default
0x00000080 Enable TLS 1.0 by default
0x00000200 Enable TLS 1.1 by default
0x00000800 Enable TLS 1.2 by default

For our example

8 + 20 + 80 + 200 + 800 = AA8 Hex = 2728 Dec

Path in registry

strRegKey = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols"

Key to add

WshShell.RegWrite strRegKey, 2728, "REG_DWORD"

Script Trusted Sites + Privacy + SSL / TLS

Exception "192.168.100.100"
Exception "192.168.100.101" 

Function Exception(Site) 

  Set WshShell = Wscript.CreateObject("Wscript.Shell") 

'------Trusted Sites------'

    strRegKey = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\"

	 WshShell.RegWrite strRegKey & Site & "\" ,"" , "REG_SZ"

   	 WshShell.RegWrite strRegKey & Site & "\" & ":Range" , Site, "REG_SZ"

   	 WshShell.RegWrite strRegKey & Site & "\*", "2", "REG_DWORD"

'------Privacy------'

    strRegKey = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\" 
   
     WshShell.RegWrite strRegKey & Site & "\", 1, "REG_DWORD" 
	
    strRegKey = "HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow\"
	
     WshShell.RegWrite strRegKey & Site, 0, "REG_BINARY"

'------SSL/TLS------'

    strRegKey = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols"
	
     WshShell.RegWrite strRegKey, 2728, "REG_DWORD"

End Function

Leave a Reply

Your email address will not be published. Required fields are marked *

*