1.打开“组策略”。
2.在“计算机配置”、“管理模板”、“Windows
组件”、“终端服务”、“加密与安全性”中双击“设置客户端连接加密级别”设置,然后单击“启用”。
3.要设置加密级别,请执行以下操作之一:
◦要将加密级别设置成“客户端兼容”、“高级别”或“低级别”,请在“加密级别”列表中,单击所需要的级别,然后单击“确定”。有关这些加密级别的信息,请参阅本主题结尾的“注意”。
◦要启用符合 FIPS
的加密,请单击“确定”以关闭“设置客户端连接加密级别属性”对话框,然后导航至“计算机配置”、“Windows
设置”、“安全设置”、“本地策略”、“安全选项”。双击“系统加密: 使用 FIPS
兼容的算法来加密、哈希和签名”,然后单击“启用”。
EN
1.Open Group Policy.
2.In Computer Configuration,
Administrative Templates, Windows Components, Terminal Services,
Encryption and Security, double-click the Set client connection
encryption level setting, and then click Enabled.
3.To set the encryption level, do
one of the following:
◦To set the encryption level to
Client Compatible, High Level, or Low Level, in the Encryption
Level list, click the level that you want, and then click OK. For
information about these encryption levels, see Note, at this end of
this topic.
◦To enable FIPS compliant
encryption, click OK to close the Set client connection encryption
level Properties dialog box, and then navigate to Computer
Configuration, Windows Settings, Security Settings, Local Policies,
Security Options. Double-click System cryptography: Use FIPS
compliant algorithms for encryption, hashing, and signing, and then
click Enabled.
4.If you set the encryption level
to High Level or if you enabled FIPS compliant encryption and you
want to use Transport Level Security (TLS) 1.0 to authenticate the
server, you must enable TLS by using the Terminal Services
Configuration tool and meet additional configuration
requirements.