Fix Chrome notification about obsolete encryption in IIS8.5 and SQL Server 2012 Fix Chrome notification about obsolete encryption in IIS8.5 and SQL Server 2012 google-chrome google-chrome

Fix Chrome notification about obsolete encryption in IIS8.5 and SQL Server 2012


Windows Server 2012 does not appear to provide the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher suite needed to get rid of this error. See https://msdn.microsoft.com/en-us/library/windows/desktop/aa374757(v=vs.85).aspx for links to pages which list the cipher suites for the various versions of Server. You will note that Windows Server 2012 does have this cipher suite and I found that upgrading to 2016 was the best way for me to resolve the Google error. Please note that if you upgrade to Windows Server 2016 you will again need to use your IIS_Crypto 2.0 program to order the ciphers appropriately (or whatever ordering interface you choose). Using the Best Practices template will get you there. I chose their cipher order which yields TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 at the top of the list.


Either put TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 on top of the list or don't let the server override the cipher order presented by the client (which puts the preferred ciphers on top). I don't know if there is an option for this.

For more background about the issue see https://security.stackexchange.com/questions/85532/chrome-showing-cryptography-as-obsolete/85544#85544