Stephen Lacy

Improving SSL on IIS6

IIS 6 by default uses MD5 hashing and low security encryption.
if you put the following into a reg file and run it it should remove some of the less secure cipher suites used by IIS.

Update 1 : Go to http://support.microsoft.com/kb/948963 to enable AES 256 (requires restart)

Update 2: If you install the above update or turn on FIPs compliance in your local security policy this will make you vulnerable to the beast attack.