Windows 7 Could not create SSL/TLS secure channel.”} System.Net.WebException

This error occurs on Windows 7 due to the TLS settings. According to Solving the TLS 1.0 Problem, 2nd Edition, TLS 1.2 is Disabled by default. Therefore, it needs to be enabled. Ensure that you’ve installed SP 1. Then,

Create a restore point

  • Open Control Panel
  • Select View by: Small icons
  • Click System
  • On left side, click System protection
  • If protection isn’t turned on for the C:, then click Configure to turn it on. Select desired size and click OK.
  • Click Create to create a restore point
  • Enter desired name for restore point
  • Click Create

Go to

Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows and click on Easy Fix

Copy the code/text below to a file that ends in .reg (ex: TLSFix.reg).

  • Open you’re favorite text editor (ex: Notepad)
  • Copy the code/text below
  • Save file with a “.reg” extension (ex: TLSFix.reg). Alternatively, save with a “.txt” extension. Then right-click the file and rename it so that it has a “.reg” extension.

Win 7 (64-bit):

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000aa8

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000

Then double click the file to add the entries to the registry. Alternatively, add each of the registry entries to the registry using regedit.

Note: The registry entries above are discussed in Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows and Transport Layer Security (TLS) registry settings.

Resources:

Leave a Comment