title: W2012 How to turn off TLS_RSA_WITH_3DES_EDE_CBC_SHA
body: <p>My PCI scans are failing on my win 2012 R2 server because of this.</p>
  
  <p>Here is the list of medium strength SSL ciphers supported by the remote server : Medium Strength Ciphers (> 64-bit and &lt; 112-bit key) TLSv1 DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES-CBC(168) Mac=SHA1 </p>
  
  <p>They told me it was this one 
  DES-CBC3-SHA
  I believe Microsoft refers to it as 
  TLS_RSA_WITH_3DES_EDE_CBC_SHA</p>
  
  <p>I would prefer to turn this off using the registry.
  Anyone know how?
  Thanks.</p>