⚠️*Warning: This article contains information about editing the registry. Improper changes to the registry can permanently damage the operating system.
Always backup the registry before making any changes.*
Starting with the Geo SCADA Expert August 2024 update, a new registry setting was introduced that allows users to disable TLS 1.3 specifically for Geo SCADA, without impacting the system-wide TLS configuration managed by Schannel.
To (temporarily) disable TLS 1.3 on a Geo SCADA server, follow these steps:
- Open the Registry Editor (regedit).
- Navigate to the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Schneider Electric\ClearSCADA\SCXCom - Create a new String Value named:
EnableTLS13 - Set its value to:
- "False" to disable TLS 1.3
- "True" to enable TLS 1.3 (default behavior)
Note: This registry key is not created automatically. If it is missing, Geo SCADA will treat it as "True" by default.