Nartac Software
nartac.com
Nartac Software
@nartac.com
IIS Crypto 4.0 has been released! New features include Windows Server 2025 support, HTTP/3 with QUIC, full logging for both the GUI and CLI versions, view current settings for the CLI, updated templates and a lot more under the hood. blog.nartac.com/2025/02/13/i...
IIS Crypto 4.0 Released
IIS Crypto 4.0 has been released! New features include Windows Server 2025 support, HTTP/3 with QUIC, full logging for both the GUI and CLI versions, view current settings for the CLI, updated temp…
blog.nartac.com
February 14, 2025 at 1:19 AM
IIS Crypto CLI 4.0 applying the strict template showing the registry keys written.
February 12, 2025 at 12:38 AM
IIS Crypto CLI viewing current settings.
February 12, 2025 at 12:26 AM
IIS Crypto 4.0 almost ready! New features include Windows Server 2025 support, HTTP/3 with QUIC, logging for GUI and CLI, view current settings for CLI, all templates updated and more.
February 11, 2025 at 11:22 PM
IIS Crypto 3.3 finally released! New features include TLS 1.3, Server 2022, new cipher suites and PCI 4.0 template updates.

blog.nartac.com/2022/10/31/iis…
IIS Crypto 3.3 Released
IIS Crypto 3.3 has finally been released! It adds TLS 1.3 for Windows Server 2022, new cipher suites, updated templates including PCI 4.0 changes and some minor fixes. Download the new version here…
blog.nartac.com
January 22, 2025 at 11:25 PM
IIS Crypto 3.2 has been released. This version includes a new checkbox for overriding the Enabled value for Protocols. See our blog post for more information.

blog.nartac.com/2020/04/11/iis…
IIS Crypto 3.2 Released
IIS Crypto 3.2 has been released. We have added a new feature to override the Protocols Enabled value. Normally the value is supposed to be set to 0xffffffff if a protocol is enabled. However, some…
blog.nartac.com
January 22, 2025 at 11:25 PM
We have been getting a lot of questions as to why IIS Crypto sets the Enabled registry key value to 0xffffffff instead of 1. Here is an explanationWe have added a new feature to override the Enabled setting. It should be released in the next day or two.

support.nartac.com/article/22-why…
January 22, 2025 at 11:25 PM
IIS Crypto 3.1 has been released! This is a minor update that fixes a couple of issues before the next release which will have new features. Download it here

nartac.com/Products/IISCr…
January 22, 2025 at 11:24 PM
IIS Crypto 3.0 has been released! New features include advanced settings, registry backup, new and updated templates, Windows Server 2019 support and more. Thank-you to our beta testers and everyone's comments and suggestions. Download it now!

nartac.com/Products/IISCr…
Nartac Software - IIS Crypto
IIS Crypto is a free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2008, 2012, 2016, 2019 and 2022. It also lets you reorder SSL/TLS cipher suites offered by IIS, change advanced settings, implement Best Practices with a single click, create custom templates and test your website.
www.nartac.com
January 22, 2025 at 11:24 PM
We have had a lot of people ask about the final release of IIS Crypto 3.0. Regression testing is almost done. We are currently updating the website, new support site and blog. Looking to release this weekend.
January 22, 2025 at 11:24 PM
IIS Crypto 3.0 Beta 2 has been released! New advanced registry settings, Windows Server 2019 support, simplified template file format, updated templates, fixes and more. Send us an email from our Contact page if you would like to try it out.
January 22, 2025 at 11:24 PM
Finally was able to do full testing on Windows Server 2019. Second beta will be released tomorrow.
January 22, 2025 at 11:24 PM
People have been asking when the final IIS Crypto 3.0 is going to be released. Originally it was Nov so we could test with Server 2019. However, MS has still not released an image in Azure. In the meantime, we are posting a second beta with even more features in the next week.
January 22, 2025 at 11:24 PM
IIS Crypto 3.0 Beta new advanced settings:
January 22, 2025 at 11:24 PM
Next beta version is almost ready. We are thinking of removing the FIPS 140-2 template. Does anyone still use it?
January 22, 2025 at 11:24 PM
IIS Crypto 3.0 Beta has finally been released! All testers should be getting an email shortly. Some new features include registry backup, updated templates, bug fixes and more. #iiscrypto
January 22, 2025 at 11:24 PM
Looking for beta testers for the next version of IIS Crypto. Email us from our contact page

ow.ly/SAEC30hC5L3
Nartac Software - Contact
Nartac Software is located in beautiful Vancouver, British Columbia.
ow.ly
January 22, 2025 at 11:24 PM
SHA-1 SHAttered. Interesting name

ow.ly/yBDS309iByl
SHAttered
Tutte le News sulla Tecnologia
ow.ly
January 22, 2025 at 11:24 PM
New TLS vulnerability called Ticketbleed found in F5 appliances. Read more and test if your site is vulnerable here

ow.ly/zZ1Z308RihD
Ticketbleed (CVE-2016-9244)
Ticketbleed is a software vulnerability in the TLS/SSL stack of F5 BIG-IP appliances allowing a remote attacker to extract up to 31 bytes of uninitialized memory at a time.
ow.ly
January 22, 2025 at 11:24 PM
SHA-1 certificates finally endingHopefully everyone has updated theirs.

ow.ly/VGoM3086qVF
SHA-1 End Times Have Arrived
Things are about to get a lot safer on the internet with SHA-2, but there is plenty of work still to be done when it comes to SHA-1 deprecation.
ow.ly
January 22, 2025 at 11:23 PM
Chrome 56 (out in Jan) will stop trusting all WoSign and StartCom certificates issued after Oct 21, 2016.

ow.ly/lmKW305L3Qa
Distrusting WoSign and StartCom Certificates
Posted by Andrew Whalley, Chrome Security Certificate Authorities (CAs) play a key role in web security by issuing digital certificates to ...
ow.ly
January 22, 2025 at 11:23 PM
Sounds like Mozilla is going to ban all WoSign and StartCom certificates:

ow.ly/K8jy304Cpw7
Firefox ready to block certificate authority that threatened Web security
Mozilla says it has lost confidence in WoSign’s ability to protect HTTPS system.
ow.ly
January 22, 2025 at 11:23 PM
Minor update to IIS Crypto has been published. Fixes a crash if run from a network share#iiscrypto #iis #schannel

ow.ly/nTsD302jjKs
Nartac Software - Download
IIS Crypto requires a minimum of Windows Server 2008 and the .Net 4.0 framework or greater. Both GUI and command line versions are available.
ow.ly
January 22, 2025 at 11:23 PM
Did you know that MS has changed the name of the cipher suites for Windows Server 2016? We have a post discussing

ow.ly/gs48302b17q
Cipher Suites Renamed in Windows Server 2016
After testing IIS Crypto 2.0 we ran into an issue with soon to be released Windows Server 2016. All of the Qualys SSL scans were not recognizing the order of the cipher suites configured by II…
ow.ly
January 22, 2025 at 11:23 PM
Found a crash when running from a network share. Already fixed but for the next release. Contact us if you run into this. #iiscrypto
January 22, 2025 at 11:23 PM