Disabling Diffie-Hellman on IIS Servers

Procedure

  1. Add or modify the following Registry key on each web server:
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\
    SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman\
    Enabled = 0 (DWORD value) 
    
    
    
    
  2. Restart the web server for the changes to take effect.