15

My question is simple. My server's operating system is Windows Server 2012 r2 and all updates were made on it.

When I run the iiscrypto I couldn't find TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 cipher suite. To find this, should I use Windows server 2016 or is there another way to get it?

jessehouwing
  • 106,458
  • 22
  • 256
  • 341
brtb
  • 2,201
  • 6
  • 34
  • 53

2 Answers2

19

Microsoft has a docs page that lists all the Windows versions and their cipher suites.

First server version to support this cipher suite is indeed Windows Server 2016.

jessehouwing
  • 106,458
  • 22
  • 256
  • 341
  • 5
    I simply cannot believe Microsoft would not add these to earlier versions of windows server. In particular server 2012 R2. How is an app deployed to these servers expected to talk to modern apis/services?? – Lysogen Aug 18 '20 at 16:02
  • 2
    Install them on a Windows 2016 server. – jessehouwing Sep 22 '20 at 11:48
4

Unfortunately Windows 2012 Server doesn't support tls-ecdhe-rsa-with-aes-256-gcm-sha384 or 256/128 Ciphers.