A new version of IIS Crypto has been released. This new version adds in a BEAST template to re-order the SSL cipher suite putting RC4 at the top to mitigate the attack. We have also added .Net 4.0 binaries for Windows 2012 as it does not install .Net 2.0 by default.

IIS Crypto has been updated to fix the security exception issue if it is run under a non-administrator account. Thanks for all of the bug reports, keep them coming!

A new version of IIS Crypto has been released. This version includes a new command line tool, fixes for TLS 1.1 and 1.2 support and fixes for re-ordering the cipher suite. A full list of changes are here. Thanks to all for the bug reports and feature suggestions, keep them coming!

Microsoft has issued an advisory (2588513) to enable TLS 1.1 on both the client and server.  This all stems from the recently disclosed vulnerability in the TLS 1.0 protocol.  One of the main reasons why we wrote IIS Crypto was to make it easy for administrators to enable TLS 1.1 and 1.2.  We are happy to see Microsoft take this issue seriously and hope many server administrators will as well.

IIS Crypto is a new free tool from Nartac Software that gives administrators the ability to enable or disable protocol and cipher suites on Windows Server 2003 and 2008.

IIS Crypto comes in quite handy for testing different server configurations for various clients. Of course if you are setting up multiple servers you can script the registry settings from here.

Give it a try and let us know if you have and comments or suggestions.