近期苹果要求App都用ssl安全连接了，以后会有越来越多的网站普及SSL。今天介绍的IIS Crypto是一个免费工具，用于在Windows 2008,2012,2016下开启或禁用相关协议的小软件，经常用于SSL/TLS（1.1和1.2）的设置。更多介绍大家自行看英文。
IIS Crypto is a free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2008, 2012 and 2016. It also lets you reorder SSL/TLS cipher suites offered by IIS, implement best practices with a single click, create custom templates and test your website.
IIS Crypto updates the registry using the same settings from this article by Microsoft. It also updates the cipher suite order in the same way that the Group Policy Editor (gpedit.msc) does. Additionally IIS Crypto lets your create custom templates that can be saved for use on multiple servers. The command line version contains the same built-in templates as the GUI version and can also be used with your own custom templates. IIS Crypto has been tested on Windows Server 2008, 2008 R2 and 2012, 2012 R2 and 2016.
IIS Crypto requires administrator privileges. If you are running under a non-administrator account, the GUI version will prompt for elevated permissions. The command line version must be run from a command line that already has elevated permissions.
Features/功能
- Single click to secure your website using best practices/一键集成最佳实践安全设置网站
- Create custom templates that can be saved and run on multiple servers/创建自定义模板，用于多服务器批量标准设置
- Stop DROWN, logjam, FREAK, POODLE and BEAST attacks/阻止并关闭常见攻击
- Disable weak protocols and ciphers such as SSL 2.0, 3.0 and MD5/禁用常见弱协议
- Enable TLS 1.1 and 1.2/启用TLS 1.1和1.2
- Enable forward secrecy/启用转发加密
- Reorder cipher suites/重新排列密码
- Built in Best Practices, PCI, PCI 3.1 and FIPS 140-2 templates/内置最佳实践等多种模板
- Site scanner to test your configuration/免费的站点扫描，确保设置无误
- Command line version/还有命令行模式的版本
下载地址：https://www.nartac.com/Products/IISCrypto/Download
