Sync with internal repo

Harvester57 · Oct 7, 2021 · 141d3c7 · 141d3c7
1 parent c9dc8f7
commit 141d3c7
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 6 deletions.
diff --git a/AdditionalHardening.admx b/AdditionalHardening.admx
@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!--  
   Author: Florian Stosse <florian.stosse@safrangroup.com>
-  Version: 1.0.12
-  Date: 27/09/2021
+  Version: 1.0.13
+  Date: 07/10/2021
   -->
 <policyDefinitions xmlns:xsd="http://www.w3.org/2001/XMLSchema"
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

diff --git a/en-US/AdditionalHardening.adml b/en-US/AdditionalHardening.adml
@@ -171,10 +171,12 @@ Changing this setting will require a restart of the computer before the setting
 Changing this setting will require a restart of the computer before the setting will take effect.
       </string>
       <!-- TLSv1.3 -->
-      <string id="TLSv13">TLS 1.3 - DO NOT ENABLE]</string>
+      <string id="TLSv13">TLS 1.3 - [WARNING: READ DESCRIPTION]</string>
       <string id="TLSv13_Help">Enables or disables the use of TLS 1.3.  TLS 1.3 is without known security issues.
 
-This setting is only compatible on Windows 10 1903 and above and does not require a reboot to take effect.
+!! WARNING: This setting is only compatible with Windows 10 1903 and above. Enabling this setting on older OS versions will break SChannel, and you will need to manually remove the SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3 key in the Registry to fix it.
+
+This setting does not require a reboot to take effect.
       </string>
       <!-- DTLSv1.0 -->
       <string id="DTLSv10">DTLS 1.0</string>

diff --git a/fr-FR/AdditionalHardening.adml b/fr-FR/AdditionalHardening.adml
@@ -174,10 +174,12 @@ Changing this setting will require a restart of the computer before the setting
 Changing this setting will require a restart of the computer before the setting will take effect.
       </string>
       <!-- TLSv1.3 -->
-      <string id="TLSv13">TLS 1.3 [EXPERIMENTAL - DO NOT ENABLE]</string>
+      <string id="TLSv13">TLS 1.3 [WARNING: READ DESCRIPTION]</string>
       <string id="TLSv13_Help">Enables or disables the use of TLS 1.3.  TLS 1.3 is without known security issues.
 
-This setting is only compatible on Windows 10 1903 and above and does not require a reboot to take effect.
+!! WARNING: This setting is only compatible with Windows 10 1903 and above. Enabling this setting on older OS versions will break SChannel, and you will need to manually remove the SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3 key in the Registry to fix it.
+
+This setting does not require a reboot to take effect.
       </string>
       <!-- DTLSv1.0 -->
       <string id="DTLSv10">DTLS 1.0</string>