title: Identify and disable weak cipher suites Windows server 2008 / IIS 7
body: <p>i'm asking a question on a subject that is pure chinese to me..sorry in advance</p>
  
  <p>A security scan result prior to the deployment of a web application on windows server 2008 R2 has raised the below message :</p>
  
  <blockquote>
    <p>Weak SSL Cipher Suites are Supported</p>
    
    <p>Reconfigure the server to avoid the use of weak cipher suites. The
    configuration changes are server-specific.</p>
    
    <p>SSLCipherSuite HIGH:MEDIUM:!MD5!EXP:!NULL:!LOW:!ADH</p>
    
    <p>For Microsoft Windows Vista, Microsoft Windows 7, and Microsoft
    Windows Server 2008, remove the cipher suites that were identified as
    weak from the Supported Cipher Suite list by following these
    instructions:</p>
    
    <p><a href="http://msdn.microsoft.com/en-us/library/windows/desktop/bb870930(v=vs.85).aspx">http://msdn.microsoft.com/en-us/library/windows/desktop/bb870930(v=vs.85).aspx</a></p>
  </blockquote>
  
  <p>I've tried undertsanding the msdn information but i'm totally lost in there.</p>
  
  <p>first of all I do not undertsand which is the cipher suite that should be removed or disabled.</p>
  
  <p>and then, how am I suppose to run the code given as example to remove a cipher suite?</p>
  
  <pre><code>#include &lt;stdio.h&gt;
  #include &lt;windows.h&gt;
  #include &lt;bcrypt.h&gt;
  
  void main()
  {
  
  SECURITY_STATUS Status = ERROR_SUCCESS;
    LPWSTR wszCipher = (L"TLS_RSA_WITH_RC4_128_SHA");
  
  Status = BCryptRemoveContextFunction(
              CRYPT_LOCAL,
              L"SSL",
              NCRYPT_SCHANNEL_INTERFACE,
              wszCipher);
  }
  </code></pre>
  
  <p>again sorry for total lack of knowledge here!</p>