After Applying NSA Security Template, No Shared Cipher on all HTTPS Pages

[Ian]

On 4/1/04 Terry ([email protected])
posted the following question, I have not been able to find a reply
when searching through the newsgroup. I have the same problem too,
does anyone know where in the security template IE has been thrown off?
Firefox on the same system has no problem getting into the
SSL sites

4/1 posting -

When we applied the NSA Security Template on our Test XP
Machine, we are no longer able to view SSL web pages.

We get the error:
"No Shared Cipher

Your browser is unable to negotiate a security level
which satisfies the requirements of this site. For
security reasons, this Web site may require strong
encryption. To gain access to this site, you may try any
or all of the following:
1) Change your browser's security settings to support the
appropriate level of encryption (the cipher suites
supported by this site are listed above).
2) Update your browser to a version that supports the
appropriate level of encryption.
3) Apply the "strong-encryption" option pack to your
operating system.
4) If in the United States, verify that you are using a
recent domestic version of your browser.
5) Contact this site's administrator for assistance.
Security Details:

Browser ciphers:
DES-CBC3-SHA

Secure Site ciphers:
RC4-MD5
RC4-MD5
RC4-SHA
EXP-RC4-MD5
EXP-RC4-MD5
EXP1024-RC4-MD5
EXP1024-RC2-CBC-MD5
EXP1024-RC4-SHA
NULL-MD5
NULL-SHA"

I checked the browser's security settings, SSL 2 & 3 are
checked. 128-Bit encryption is enabled and shows under
Help-About.

Any ideas on how to enable the rest of the protocols?

 

[Guest]

I had the same problem after applying the NSA windows xp security template.
I just applied the setup security template and I'm able to access https
sites now. I'm going to do a little more research and reapply the windows xp
template and see if i can't figure out which setting if causing the
problem...

 

[Robert Aldwinckle]

I suspect you will find more knowledgeable readers on newsgroups
which specialize in security or administration for your OS.

BTW there is a new download location you may want to check:

< http://www.nsa.gov/snac/downloads_winxp.cfm?MenuID=scg10.3.1.1 >


(indirectly via Google Web search for
"NSA security template" XP sp2
)


If these discussions have already occurred in the newsgroups
it wasn't using the above set of keywords.


Good luck

Robert Aldwinckle