Disabling Diffie-Hellman on IIS Servers

Procedure

  1. Add or modify the following Registry key on each web server: 
    
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\
SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman\
Enabled = 0 (DWORD value)
  2. Restart the web server for the changes to take effect.