Windows Server 2008 and IIS 7

IIS, or Internet Information Services, is a Microsoft web server for Microsoft Windows. Unfortunately, when Windows Server 2008 uses IIS 7, SSL 2.0 is automatically enabled. If SSL 2.0 is enabled, you will fail a PCI Compliance audit. To prevent a PCI Compliance audit failure, you must manually disable SSL 2.0 and enable SSL 3.0.

To disable SSL 2.0 and enable SSL 3.0:

1. On the desktop, click Start.
2. Click Run.
3. Enter regedit.
4. Click OK.
5. In the Registry Editor, locate the following file:
   • HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0.
6. Right-click the file.
7. Click New.
8. Click Key.
9. Name the new folder Server.
10. In the Server folder, click Edit.
11. Click New.
12. Click DWORD (32-bit) Value.
13. Name the file Enabled.
14. Click Enter.
15. 0x00000000 (0) should appear under the Data column of the Registry Editor. If not, right-click the file, click Modify, and enter 0 as the Value data.
16. Restart the computer.

Registry Editor Window