#Verifica se o protocolo TLS 1.0 está desabilitado

$tls10Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls)
if ($tls10Enabled) {
Write-Host “O protocolo TLS 1.0 está habilitado.”
} else {
Write-Host “O protocolo TLS 1.0 está desabilitado.”
}

#Verifica se o protocolo TLS 1.1 está desabilitado

$tls11Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls11)
if ($tls11Enabled) {
Write-Host “O protocolo TLS 1.1 está habilitado.”
} else {
Write-Host “O protocolo TLS 1.1 está desabilitado.”
}

#Verifica se o protocolo TLS 1.2 está desabilitado

$tls12Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls12)
if ($tls12Enabled) {
Write-Host “O protocolo TLS 1.2 está habilitado.”
} else {
Write-Host “O protocolo TLS 1.2 está desabilitado.”
}

#Verifica se o 3DES está habilitado

$3desEnabled = Get-TlsCipherSuite | Where-Object { $_.Name -like “3DES” }
if ($3desEnabled) {
Write-Host “O 3DES está habilitado.”
} else {
Write-Host “O 3DES está desabilitado.”
}

******************************************************************************************************************************************************

Desabilita o protocolo TLS 1.0, 1.1 e 3DES

Desabilita o protocolo TLS 1.0
Set-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client’ -Name ‘DisabledByDefault’ -Value 1
Set-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client’ -Name ‘Enabled’ -Value 0

# Desabilita o protocolo TLS 1.1

Set-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client’ -Name ‘DisabledByDefault’ -Value 1
Set-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client’ -Name ‘Enabled’ -Value 0

# Desabilita o 3DES

Set-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168’ -Name ‘Enabled’ -Value 0

# Verifica se as alterações foram aplicadas com sucesso

$tls10Disabled = (Get-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client’).Enabled
$tls11Disabled = (Get-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client’).Enabled
$3desDisabled = (Get-ItemProperty -Path ‘HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168’).Enabled

if ($tls10Disabled -eq 0 -and $tls11Disabled -eq 0 -and $3desDisabled -eq 0) {
Write-Host “TLS 1.0, TLS 1.1 e o 3DES foram desabilitados com sucesso.”
} else {
Write-Host “Falha ao desabilitar TLS 1.0, TLS 1.1 ou o 3DES. Verifique as configurações.”
}