Create and set the following registry key value:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman
"ServerMinKeyBitLength"=dword:00000800

Hex value 800 = 2048

References: https://technet.microsoft.com/en-us/library/security/3174644.aspx

Advertisements