{"id":91,"date":"2023-05-30T13:44:10","date_gmt":"2023-05-30T16:44:10","guid":{"rendered":"https:\/\/euclides.me\/?p=91"},"modified":"2023-05-30T13:44:17","modified_gmt":"2023-05-30T16:44:17","slug":"script-de-validacao-da-versao-do-tls-e-3des","status":"publish","type":"post","link":"https:\/\/euclides.me\/?p=91","title":{"rendered":"Script de validacao da versao do TLS e 3DES"},"content":{"rendered":"\n

#Verifica se o protocolo TLS 1.0 est\u00e1 desabilitado<\/h1>\n\n\n\n

$tls10Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls)
if ($tls10Enabled) {
Write-Host “O protocolo TLS 1.0 est\u00e1 habilitado.”
} else {
Write-Host “O protocolo TLS 1.0 est\u00e1 desabilitado.”
}<\/p>\n\n\n\n

#Verifica se o protocolo TLS 1.1 est\u00e1 desabilitado<\/h1>\n\n\n\n

$tls11Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls11)
if ($tls11Enabled) {
Write-Host “O protocolo TLS 1.1 est\u00e1 habilitado.”
} else {
Write-Host “O protocolo TLS 1.1 est\u00e1 desabilitado.”
}<\/p>\n\n\n\n

#Verifica se o protocolo TLS 1.2 est\u00e1 desabilitado<\/h1>\n\n\n\n

$tls12Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls12)
if ($tls12Enabled) {
Write-Host “O protocolo TLS 1.2 est\u00e1 habilitado.”
} else {
Write-Host “O protocolo TLS 1.2 est\u00e1 desabilitado.”
}<\/p>\n\n\n\n

#Verifica se o 3DES est\u00e1 habilitado<\/h1>\n\n\n\n

$3desEnabled = Get-TlsCipherSuite | Where-Object { $_.Name -like “3DES<\/em>” }
if ($3desEnabled) {
Write-Host “O 3DES est\u00e1 habilitado.”
} else {
Write-Host “O 3DES est\u00e1 desabilitado.”
}<\/p>\n\n\n\n

******************************************************************************************************************************************************<\/p>\n\n\n\n

Desabilita o protocolo TLS 1.0<\/em>, 1.1 e 3DES<\/h2>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

Desabilita o protocolo TLS 1.0<\/em>
Set-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.0\\Client’ -Name ‘DisabledByDefault’ -Value 1
Set-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.0\\Client’ -Name ‘Enabled’ -Value 0<\/p>\n\n\n\n

# Desabilita o protocolo TLS 1.1<\/h1>\n\n\n\n

Set-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.1\\Client’ -Name ‘DisabledByDefault’ -Value 1
Set-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.1\\Client’ -Name ‘Enabled’ -Value 0<\/p>\n\n\n\n

# Desabilita o 3DES<\/h1>\n\n\n\n

Set-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Ciphers\\Triple DES 168’ -Name ‘Enabled’ -Value 0<\/p>\n\n\n\n

# Verifica se as altera\u00e7\u00f5es foram aplicadas com sucesso<\/h1>\n\n\n\n

$tls10Disabled = (Get-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.0\\Client’).Enabled
$tls11Disabled = (Get-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.1\\Client’).Enabled
$3desDisabled = (Get-ItemProperty -Path ‘HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Ciphers\\Triple DES 168’).Enabled<\/p>\n\n\n\n

if ($tls10Disabled -eq 0 -and $tls11Disabled -eq 0 -and $3desDisabled -eq 0) {
Write-Host “TLS 1.0, TLS 1.1 e o 3DES foram desabilitados com sucesso.”
} else {
Write-Host “Falha ao desabilitar TLS 1.0, TLS 1.1 ou o 3DES. Verifique as configura\u00e7\u00f5es.”
}<\/p>\n\n\n\n

\n\n\n\n
\n","protected":false},"excerpt":{"rendered":"

#Verifica se o protocolo TLS 1.0 est\u00e1 desabilitado $tls10Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls)if ($tls10Enabled) {Write-Host “O protocolo TLS 1.0 est\u00e1 habilitado.”} else {Write-Host “O protocolo TLS 1.0 est\u00e1 desabilitado.”} #Verifica se o protocolo TLS 1.1 est\u00e1 desabilitado $tls11Enabled = [System.Net.ServicePointManager]::SecurityProtocol.HasFlag([System.Net.SecurityProtocolType]::Tls11)if ($tls11Enabled) {Write-Host “O protocolo TLS 1.1 est\u00e1 habilitado.”} else {Write-Host “O protocolo TLS 1.1 est\u00e1 desabilitado.”} #Verifica […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_regular_price":[],"currency_symbol":[],"footnotes":""},"categories":[1],"tags":[],"class_list":["post-91","post","type-post","status-publish","format-standard","hentry","category-https-euclides-me"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t