How to replicate a machine TLS and Cipher Suites settings with an IIS Cryto template

[Andrea_Bertazzo]

In many situations it is necessary to know the TLS configurations and the Cipher Suites in use on a machine and to replicate them on another one for testing.

A very good option is to get the ISS Crypto template that contains all these settings and import it on the testing machine to immediately replicate the configuration.

Exporting a Template

Follow these steps to create the IIS Crypto template with the machine configuration.

1. Download IIS Crypto GUI from here.  Save it on a folder.
2. Double-click on IISCrypto.exe and run it. It is not necessary to install the program.
3. Go to templates.
4. Add name and author.
5. Save the template  (see the image below).

 

Importing Template

Follow these steps to import the template on the testing machine.

1. Double click on IISCrypto.exe and run it.
2. Go to templates.
3. Click on the Open.
4. Select the template you imported.
5. Click on Apply (see the image below).
6. Reboot the machine as requested.

When you import a new template, the TLS and Chyper Suite settings of the other machine are applied and the old configuration is lost. It is recommended to create a template with the original settings, so that the previous status can be restored as the tests are completed.