How to Re-enable TLS 1.0 and 1.1 on Windows 11
Re-enabling TLS 1.0 and 1.1 on Windows 11 significantly lowers your computer’s security.
TLS, or Transport Layer Security, is a technology that keeps your online information safe and private when you use the internet. TLS 1.0 and 1.1 are older versions of this safety technology that are no longer considered secure.
Microsoft turned off these older protocols by default in Windows 11, including in the 22H2 update, because they have known weaknesses. Newer versions like TLS 1.2 and 1.3 offer much better protection against online dangers.
Turning TLS 1.0 or 1.1 back on can make your Windows 11 PC vulnerable to attacks that steal your information.
Re-enable TLS 1.0 and 1.1 by opening Registry Editor (regedit) and navigating to 🗝️HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocols. Create new keys for TLS 1.0 and TLS 1.1, then add Client and Server subkeys with DWORD values for Enabled and DisabledByDefault.
How to Check Enabled TLS Versions
Get-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\*'. This helps you identify if the keys already exist on your system.Re-enabling TLS 1.0 and 1.1 via Registry Editor
You can re-enable TLS 1.0 and 1.1 on Windows 11 using the Registry Editor, but you need administrator rights. This process involves changing specific settings within Windows to allow older TLS versions.
Follow these steps to modify the Schannel settings in the Windows Registry.
Step 1: Press Win + R, type regedit, and hit Enter to open the Registry Editor.
Step 2: Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
Step 3: Right-click the Protocols folder, select New > Key, and name it TLS 1.0. Inside that, create two keys named Client and Server.
Step 4: Inside both the Client and Server folders, right-click the empty space. Select New > DWORD (32-bit) Value. Name it Enabled and set the value to 1. Create another DWORD named DisabledByDefault and set the value to 0.
Step 5: Repeat these steps for TLS 1.1 if needed. Restart your computer for changes to take effect.
Troubleshooting SSL Handshake Failures
If you're encountering an SSL handshake error, it signifies that your computer and the server are unable to establish a secure connection, which commonly occurs with older applications. Re-enabling TLS 1.0 might help, but if the problem continues, check your Group Policy settings, as they can sometimes override registry changes for security.
Summary
Is it safe to re-enable TLS 1.0 and 1.1 on 🪟 Windows 11?
Is it safe to re-enable TLS 1.0 and 1.1 on Windows 11? No, it's not truly safe to re-enable TLS 1.0 and 1.1 on Windows 11, as they possess known security weaknesses. You should only turn them back on briefly if a very old application absolutely needs them to connect. Always turn them off again right after you're done to keep your computer protected.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!