title: Enable TLS 1.2 without enabling FIPS policy
body: <p>I am trying to enable TLS 1.2 on Windows Server 2012 R2.</p>
  
  <p>For this I have upgraded my SQL Server 2012 SP2 to 11.2.5678.0. Also, I have performed the following in regedit:</p>
  
  <blockquote>
    <p>[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319]
             SchUseStrongCrypto=dword:00000001</p>
    
    <p>[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft.NETFramework\v4.0.30319]
             SchUseStrongCrypto=dword:00000001</p>
    
    <p>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols]</p>
    
    <ul>
    <li>TLS 1.1 -> Client -> DisabledByDefault= dword:00000000
    
    <ul>
    <li>TLS 1.1 -> Client -> Enabled= dword:00000001</li>
    <li>TLS 1.2 -> Client -> DisabledByDefault= dword:00000000</li>
    <li>TLS 1.2 -> Client -> Enabled= dword:00000001</li>
    <li>TLS 1.1 -> Server -> DisabledByDefault= dword:00000000</li>
    <li>TLS 1.1 -> Server -> Enabled= dword:00000001</li>
    <li>TLS 1.2 -> Server -> DisabledByDefault= dword:00000000</li>
    <li>TLS 1.2 -> Server -> Enabled= dword:00000001</li>
    </ul></li>
    </ul>
  </blockquote>
  
  <p>Also, I have upgraded .Net Framework Version to 4.6.</p>
  
  <p>I still find the following issue in Event Logs:  </p>
  
  <blockquote>
    <p>A fatal error occurred while creating an SSL client credential. The internal error state is 10013.</p>
  </blockquote>
  
  <p>The only solution that I find on portals is to enable the local security policy “System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing”
  I don’t want to enable this policy. Can anyone please help me in upgrading TLS to TLS v1.2 without enabling the above policy and let me know if I have missed something.</p>