title: How to set cipher suites to 2048 bit asymmetric keys
body: <p>I am trying to increase the security of the Cipher Suites on Windows 2012 Server.</p>
  
  <p>The <a href="https://globalsign.ssllabs.com/analyze.html?d=test.apgedi.com" rel="nofollow noreferrer">report card</a> on this server shows the following:</p>
  
  <p>Cipher Suites</p>
  
  <h1>TLS 1.2 (suites in server-preferred order)</h1>
  
  <p>TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)   DH 1024 bits   FS   WEAK   256
  TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)   DH 1024 bits   FS   WEAK   128</p>
  
  <p>As far as I understand it, it is saying that the bits should be 2048, instead of 1024.  However, I don't understand how to change that.</p>
  
  <p>I have followed <a href="https://www.howtogeek.com/221080/how-to-update-your-windows-server-cipher-suite-for-better-security/" rel="nofollow noreferrer">these steps</a> to improve the Cipher Suites, but it doesn't mention the bits. </p>
  
  <p>For background, these suites are used by the server when sending/receiving EDI documents and I want to ensure no insecure or weak cipher suites are being used.</p>