- Article
The Schannel SSP implements versions of the TLS, DTLS and SSL protocols. Different Windows versions support different protocol versions.
TLS protocol version support
The following table displays the Microsoft Schannel Provider support of TLS protocol versions.
Important
Starting with Windows 11 Insider Preview releases in 2024, TLS versions 1.0 and 1.1 will be disabled by default. This change applies to both server and client devices but won't impact in-market operating system versions. For more information, see TLS 1.0 and TLS 1.1 deprecation in Windows.
Note
TLS 1.3 is supported starting in Windows 11 and Windows Server 2022. Enabling TLS 1.3 on earlier versions of Windows is not a safe system configuration.
Tip
You may need to scroll horizontally or select Expand table to view all columns in the table.
Windows OS | TLS 1.0 Client | TLS 1.0 Server | TLS 1.1 Client | TLS 1.1 Server | TLS 1.2 Client | TLS 1.2 Server | TLS 1.3 Client | TLS 1.3 Server |
---|---|---|---|---|---|---|---|---|
WindowsVista/Windows Server2008 | Enabled | Enabled | Not supported | Not supported | Not supported | Not supported | Not supported | Not supported |
Windows Server2008 with Service Pack2 (SP2) | Enabled | Enabled | Disabled | Disabled | Disabled | Disabled | Not supported | Not supported |
Windows7/Windows Server2008R2 | Enabled | Enabled | Disabled | Disabled | Disabled | Disabled | Not supported | Not supported |
Windows8/Windows Server2012 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows8.1/Windows Server2012R2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1507 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1511 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1607/Windows Server2016 Standard | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1703 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1709 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1803 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1809/Windows Server2019 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1903 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1909 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 2004 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 20H2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 21H1 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 21H2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
Windows10, version 22H2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Not supported | Not supported |
WindowsServer 2022 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled |
Windows11, version 21H2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled |
Windows11, version 22H2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled |
Windows11, version 23H2 | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled |
DTLS protocol version support
The following lists the Microsoft Schannel Provider support of DTLS protocol versions.
Tip
You may need to scroll horizontally or select Expand table to view all columns in this table.
Windows OS | DTLS 1.0 Client | DTLS 1.0 Server | DTLS 1.2 Client | DTLS 1.2 Server |
---|---|---|---|---|
WindowsVista/Windows Server2008 | Not supported | Not supported | Not supported | Not supported |
Windows Server2008 with SP2 | Not supported | Not supported | Not supported | Not supported |
Windows7/Windows Server2008R2 | Enabled | Enabled | Not supported | Not supported |
Windows8/Windows Server2012 | Enabled | Enabled | Not supported | Not supported |
Windows8.1/Windows Server2012R2 | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1507 | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1511 | Enabled | Enabled | Not supported | Not supported |
Windows10, version 1607/Windows Server2016 Standard | Enabled | Enabled | Enabled | Enabled |
Windows10, version 1703 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 1803 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 1809 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 1903 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 1909 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 2004 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 20H2 | Enabled | Enabled | Enabled | Enabled |
Windows10, version 21H1 | Enabled | Enabled | Enabled | Enabled |
WindowsServer 2022 | Enabled | Enabled | Enabled | Enabled |
Windows11 | Enabled | Enabled | Enabled | Enabled |
Pre-TLS standard protocols support
The following lists the Microsoft Schannel Provider support of pre-TLS standard protocols.
Tip
You may need to scroll horizontally or select Expand table to view all columns in this table.
Windows OS | PCT 1.0 | SSL2 Client | SSL2 Server | SSL3 Client | SSL3 Server |
---|---|---|---|---|---|
WindowsVista/Windows Server2008 | Not supported | Disabled | Enabled | Enabled | Enabled |
Windows Server2008 with SP2 | Not supported | Disabled | Enabled | Enabled | Enabled |
Windows7/Windows Server2008R2 | Not supported | Disabled | Enabled | Enabled | Enabled |
Windows8/Windows Server2012 | Not supported | Disabled | Disabled | Enabled | Enabled |
Windows8.1/Windows Server2012R2 | Not supported | Disabled | Disabled | Enabled | Enabled |
Windows10, version 1507 | Not supported | Disabled | Disabled | Enabled | Enabled |
Windows10, version 1511 | Not supported | Disabled | Disabled | Enabled | Enabled |
Windows10, version 1607/Windows Server2016 Standard | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 1703 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 1803 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 1809 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 1903 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 1909 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 2004 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 20H2 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows10, version 21H1 | Not supported | Not supported | Not supported | Disabled | Disabled |
WindowsServer 2022 | Not supported | Not supported | Not supported | Disabled | Disabled |
Windows11 | Not supported | Not supported | Not supported | Disabled | Disabled |
Important
Beginning with Windows10, version 1607 and Windows Server 2016, SSL 2.0 has been removed and is no longer supported.
Tip
All versions of Windows will accept a unified format "ClientHello" message even when SSL version 2 is disabled or no longer supported.
See also
- TLS 1.0 and TLS 1.1 deprecation in Windows
Feedback
Was this page helpful?
Provide product feedback|
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for
This product This page