Disabling TLS 1.3 in Geo SCADA Expert (August 2024 Update and Later)

⚠️*Warning: This article contains information about editing the registry. Improper changes to the registry can permanently damage the operating system.
Always backup the registry before making any changes.*

Starting with the Geo SCADA Expert August 2024 update, a new registry setting was introduced that allows users to disable TLS 1.3 specifically for Geo SCADA, without impacting the system-wide TLS configuration managed by Schannel.

To (temporarily) disable TLS 1.3 on a Geo SCADA server, follow these steps:

1. Open the Registry Editor (regedit).
2. Navigate to the following key:
   HKEY_LOCAL_MACHINE\SOFTWARE\Schneider Electric\ClearSCADA\SCXCom
3. Create a new String Value named:
   EnableTLS13
4. Set its value to:
   - "False" to disable TLS 1.3
   - "True" to enable TLS 1.3 (default behavior)

Note: This registry key is not created automatically. If it is missing, Geo SCADA will treat it as "True" by default.

Released for: Schneider Electric Macedonia