To do this registry edit manually, open the Windows Registry and navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
If the TLS 1.1 and TLS 1.2 subkeys are missing (i.e. if the "Protocols" key only has a single subkey named "SSL 2.0"), you need to create them manually. Here's how to do so:
- Right-click on "Protocols". Select "New", then "Key". Name the new key "TLS 1.1" (without the inverted commas).
- Right-click on that new key, then create another key underneath it named "Client" (without the inverted commas).
- Right-click on the new "Client" key. Select "New", then "DWORD (32bit) Value". Name the new item "DisabledByDefault" (without the inverted commas). By default, its value is zero (which is what you need, so leave it as that).
- Right-click on "Protocols". Select "New", then "Key". Name the new key "TLS 1.2" (without the inverted commas).
- Right-click on that new key, then create another key underneath it named "Client" (without the inverted commas).
- Right-click on the new "Client" key. Select "New", then "DWORD (32bit) Value". Name the new item "DisabledByDefault" (without the inverted commas). By default, its value is zero (which is what you need, so leave it as that).
Here is a link to an image which shows what the fixed registry should now look like: