Skip to main content

TLS 1.3 Enabled

Summary

This document checks the registry for the value of the stored credentials flag.

Registry Path:

HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client:Enabled
  • If it is set to 1, TLS 1.3 is enabled.
  • If it is not set, TLS 1.3 is disabled.

Settings

Detection StringComparatorResultApplicable OS
{%-HKLM/SYSTEM/CurrentControlSet/Control/SecurityProviders/SCHANNEL/Protocols/TLS 1.3/Client:Enabled-%}Equals1Windows