With TLS, you are able to specify which cipher suite or suites your web server should support. A cipher suite is a specific set of methods or algorithms that provide functions including key exchange, bulk encryption, hashing and message digests, and authentication.
Once the browser connects to the server, the two parties negotiate and choose the best cipher suite that both sides can support. If the browser only asks for cipher suites that the web server does not support, then the server terminates the communication.
By default, Windows Server 2016 supports 31 cipher suites providing different algorithms and different key lengths. In this recipe, you retrieve the cipher suites on Windows Server 2016, and both enable and disable a specific cipher suite.
You run this recipe on the Windows Server 2016 server SRV1 on which you have loaded IIS (as per the Install IIS recipe) and configured secure HTTP (as per the Configure IIS for SSL recipe).
