IIS Crypto is a Windows application for enhancing the security of any website. It is possible to reorder SSL/TLS cipher suites offered by IIS and implement best practices with a single click.

Main purpose

Using this tool you are able to change advanced network security parameters without manually editing the system registry in Windows Server 2008, 2012, 2016, 2019 and 2022. Instruments for creating custom profiles that can be quickly installed to multiple servers are provided as well. Additionally, there is a command line version of the program with flexible automation options.

Other utilities for working with IIS servers like Microsoft AppFabric are available for download.

Security

It is possible to use TLS 1.3 and forward secrecy to protect the connection from various types of external attacks. Weak protocols and ciphers can be disabled. There is an embedded site scanner for testing the resulting configuration and identifying potential issues.

Users can revert back to the default server settings as well as create and restore registry backups. This is helpful for quickly recovering the operating system after crashes and hardware failures.

Features

free to download and use;
provides tools for enabling or disabling various network security functions;
it is possible to manually adjust relevant system registry records;
there is support for a wide range of cyphers, connection protocols and hash types;
compatible with all modern versions of Windows Server.