---
title: "How to Add Required Cipher Suites"
type: "wiki"
space: "Axero Documentation"
author: "Maxwell Drain"
created: 2024-08-14T21:20:02Z
updated: 2026-09-07T00:26:08Z
tags: ["installation", "site-administrator"]
url: "https://my.axerosolutions.com/spaces/5/axero-documentation/wiki/view/104881/how-to-add-required-cipher-suites"
---

# How to Add Required Cipher Suites

**Applies to**: Self-hosted sites. These steps change Windows settings on the server that runs your Axero site, so they apply only if you host Axero yourself. On Axero-hosted sites the Axero team manages these settings.

Axero requires TLS 1.2 or higher, with a specific set of cipher suites \(the encryption methods a browser and your server agree on before exchanging data\). These steps enable TLS 1.2 on a Windows web server, turn off the older TLS 1.0 and 1.1, and put the required cipher suites in priority order.

1. **Enable TLS 1.2**
    1. **Open Registry Editor**
        1. Press **Windows Key + R**, type `regedit`, and press **Enter**.
        2. Navigate to `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols`
    2. **Create TLS 1.2 Key**
        1. Right-click **Protocols**, select **New > Key**, and name it **TLS 1.2**.
        2. Under **TLS 1.2**, create two keys: **Client** and **Server**.
        3. Under both **Client** and **Server**, create two **DWORD \(32-bit\)** values with the following values:
            - `DisabledByDefault` with value `0`.
            - `Enabled` with value `1`.
    3. **Disable Older TLS Versions**
        - Navigate to the keys for **TLS 1.0** and **TLS 1.1**, and set `DisabledByDefault` to `1` and `Enabled` to `0`.
2. **Prioritize Cipher Suites**
    1. **Open Group Policy Editor**
        1. Press **Windows Key + R**, type `gpedit.msc`, and press **Enter**.
        2. Navigate to **Computer Configuration > Administrative Templates > Network > SSL Configuration Settings**.
    2. **Configure SSL Cipher Suite Order**
        1. Double-click **SSL Cipher Suite Order** and select **Enabled**.
        2. Copy the following list of cipher suites:

            ```
            TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
            ```
        3. Replace the list in the **SSL Cipher Suites** box with the copied list.
    3. **Apply Changes**
        - Click **OK** or **Apply** to save the changes.
    4. **Restart the Server**
        - The changes will take effect after a restart.

#### Related pages

- [On-Premises Installation Guide](https://my.axerosolutions.com/spaces/5/axero-documentation/wiki/view/329/on-premises-installation-guide "On-Premises Installation Guide") \(the full installation guide these steps belong to\)
- [Self-Hosted Site Management Guide](https://my.axerosolutions.com/spaces/5/axero-documentation/wiki/view/100101/self-hosted-site-management-guide "Self-Hosted Site Management Guide") \(the security minimums a self-hosted site has to meet\)
- [How to Install .NET Framework 4.8](https://my.axerosolutions.com/spaces/5/axero-documentation/wiki/view/104882/how-to-install-net-framework-4-8 "How to Install .NET Framework 4.8") \(the .NET Framework install that comes before this\)