How to get 128-bit security with IE6

[Ray K]

If I go to Help/About, I see:
- Version 6.0.2800.1106
- Cipher Strength: 56-bit
- Product ID:51873-335-7881281-09075
- Update Versions:;SP1;

I think that the 56-bit strength is what's preventing me from going to
my bank's home page. When I go here,
http://support.microsoft.com/?kbid=195833,
it says that IE supports only 40- and 128-bit encryption.

First question is, Is Cipher Strength different from encryption? If not,
how to explain that odd 56-bit number?

In any case, the remainder of the above Microsoft link addresses
updating versions of IE before 6.0.

At this link,
http://www.microsoft.com/windows/ie/ie6/downloads/recommended/128bit/default.mspx,
it says that IE5.5 already includes 128-bits, so IE 6 should also have it.

On Tools/Internet Options/Advanced, under Security the SSL2.0, SSL3.0
and TLS1.0 boxes are all checked.

I'm using W2k, Professional (SP4, with about 70 hotfixes), so I can't go
to IEv7.

How do I get 128-bit encryption with my version?

Thanks,

Ray

 

[PA Bear [MS MVP]]

[You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63

 

[Ray K]

[You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63

Bear,

I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

Tnanks,

Ray

 

[PA Bear [MS MVP]]

Ray K wrote:

[You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63

I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

[Please quote this entire post in your reply.]

Have you ever been able to access the bank website using IE6 SP1 on this
machine? IOW, is this a sudden, new problem or an ongoing one?

Is this your own personal machine or one belonging to your employer, school,
or...?

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a Norton or McAfee application ever been installed?

 

[Ray K]

Ray K wrote:

[You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63

I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

[Please quote this entire post in your reply.]

Have you ever been able to access the bank website using IE6 SP1 on this
machine? IOW, is this a sudden, new problem or an ongoing one?

Probably not, as I usually use SeaMonkey as my browser. This probably is
my first attempt to use IE with this site, and I did so because I was
having a problem logging in with SM, so using IE was just a test.

Is this your own personal machine or one belonging to your employer,
school, or...?
Personal

What anti-virus application or security suite is installed and is your
subscription current?

I usually use System Mechanic suite, but it isn't installed now.

What anti-spyware applications (other than

Defender)? What third-party firewall (if any)?

None. I'm living dangerously now.

Has a Norton or McAfee application ever been installed?

No

Ray

 

[PA Bear [MS MVP]]

Ray K wrote:

If I go to Help/About, I see:
- Version 6.0.2800.1106
- Cipher Strength: 56-bit
- Product ID:51873-335-7881281-09075
- Update Versions:;SP1;

I think that the 56-bit strength is what's preventing me from going to
my bank's home page. When I go here,
http://support.microsoft.com/?kbid=195833,
it says that IE supports only 40- and 128-bit encryption.

First question is, Is Cipher Strength different from encryption? If
not,
how to explain that odd 56-bit number?

In any case, the remainder of the above Microsoft link addresses
updating versions of IE before 6.0.

At this link,
http://www.microsoft.com/windows/ie/ie6/downloads/recommended/128bit/default.mspx,

it says that IE5.5 already includes 128-bits, so IE 6 should also
have it.

On Tools/Internet Options/Advanced, under Security the SSL2.0, SSL3.0
and TLS1.0 boxes are all checked.

I'm using W2k, Professional (SP4, with about 70 hotfixes), so I can't
go
to IEv7.

How do I get 128-bit encryption with my version? </paste> PA Bear [MS
MVP] wrote: [You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but
see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63


I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

[Please quote this entire post in your reply.]

Have you ever been able to access the bank website using IE6 SP1 on this
machine? IOW, is this a sudden, new problem or an ongoing one?

Probably not, as I usually use SeaMonkey as my browser. This probably is
my first attempt to use IE with this site, and I did so because I was
having a problem logging in with SM, so using IE was just a test.

Is this your own personal machine or one belonging to your employer,
school, or...?
Personal

What anti-virus application or security suite is installed and is your
subscription current?

I usually use System Mechanic suite, but it isn't installed now.

What anti-spyware applications (other than

Defender)? What third-party firewall (if any)?

None. I'm living dangerously now.

Has a Norton or McAfee application ever been installed?

No

The fact that you're having problems in SM suggests that you may have a
hijackware infection.

Why have you no anti-virus application and no firewall installed now? That
was NOT a wise move, especially if you're having difficulties reaching
secure websites.

Protect Your PC!
http://www.microsoft.com/athome/security/computer/default.mspx

Learn how to protect your PC by taking three simple steps
http://www.microsoft.com/downloads/details.aspx?familyid=3AD23728-4973-4DA5-9836-602954130D38

That being said, I was thinking of suggesting that you uninstall/reinstall
IE6; however, doing so can be complicated in Win2K. But this leads me to
ask another question in the meantime: Have you ever had occasion to
reinstall Win2K *after* you'd installed IE6 SP1? If you so, did you
uninstall IE6 SP1 before reinstalling Win2K?

May we assume you're running Win2K SP4 now?

 

[Peter Foldes]

PA

Windows 2000 on the SP2 level still had the IE 56bit encryption. Installing SP3 and
above on W2K brought IE inline with the 128bit encryption. SP's were not cumulative
on W2K. If the OP jumped from SP2 to SP4 he is most likely to have 56 bit as he is
saying among other issues He is missing SP3 which is probably not installed

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

Ray K wrote:
<paste>
If I go to Help/About, I see:
- Version 6.0.2800.1106
- Cipher Strength: 56-bit
- Product ID:51873-335-7881281-09075
- Update Versions:;SP1;

I think that the 56-bit strength is what's preventing me from going to
my bank's home page. When I go here,
http://support.microsoft.com/?kbid=195833,
it says that IE supports only 40- and 128-bit encryption.

First question is, Is Cipher Strength different from encryption? If not,
how to explain that odd 56-bit number?

In any case, the remainder of the above Microsoft link addresses
updating versions of IE before 6.0.

At this link,
http://www.microsoft.com/windows/ie/ie6/downloads/recommended/128bit/default.mspx,

it says that IE5.5 already includes 128-bits, so IE 6 should also
have it.

On Tools/Internet Options/Advanced, under Security the SSL2.0, SSL3.0
and TLS1.0 boxes are all checked.

I'm using W2k, Professional (SP4, with about 70 hotfixes), so I can't go
to IEv7.

How do I get 128-bit encryption with my version? </paste> PA Bear [MS
MVP] wrote: [You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63


I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

[Please quote this entire post in your reply.]

Have you ever been able to access the bank website using IE6 SP1 on this
machine? IOW, is this a sudden, new problem or an ongoing one?

Probably not, as I usually use SeaMonkey as my browser. This probably is
my first attempt to use IE with this site, and I did so because I was
having a problem logging in with SM, so using IE was just a test.

Is this your own personal machine or one belonging to your employer,
school, or...?
Personal

What anti-virus application or security suite is installed and is your
subscription current?

I usually use System Mechanic suite, but it isn't installed now.

What anti-spyware applications (other than

Defender)? What third-party firewall (if any)?

None. I'm living dangerously now.

Has a Norton or McAfee application ever been installed?

No

The fact that you're having problems in SM suggests that you may have a hijackware
infection.

Why have you no anti-virus application and no firewall installed now? That was
NOT a wise move, especially if you're having difficulties reaching secure
websites.

Protect Your PC!
http://www.microsoft.com/athome/security/computer/default.mspx

Learn how to protect your PC by taking three simple steps
http://www.microsoft.com/downloads/details.aspx?familyid=3AD23728-4973-4DA5-9836-602954130D38

That being said, I was thinking of suggesting that you uninstall/reinstall IE6;
however, doing so can be complicated in Win2K. But this leads me to ask another
question in the meantime: Have you ever had occasion to reinstall Win2K *after*
you'd installed IE6 SP1? If you so, did you uninstall IE6 SP1 before reinstalling
Win2K?

May we assume you're running Win2K SP4 now?

 

[PA Bear [MS MVP]]

Thanks for that, Peter. Yet another reason to ask if he's running Win2K
SP4.

Windows 2000 on the SP2 level still had the IE 56bit encryption.
Installing
SP3 and above on W2K brought IE inline with the 128bit encryption. SP's
were not cumulative on W2K. If the OP jumped from SP2 to SP4 he is most
likely to have 56 bit as he is saying among other issues He is missing SP3
which is probably not installed

PA Bear [MS MVP] wrote:
Ray K wrote:
<paste>
If I go to Help/About, I see:
- Version 6.0.2800.1106
- Cipher Strength: 56-bit
- Product ID:51873-335-7881281-09075
- Update Versions:;SP1;

I think that the 56-bit strength is what's preventing me from going
to
my bank's home page. When I go here,
http://support.microsoft.com/?kbid=195833,
it says that IE supports only 40- and 128-bit encryption.

First question is, Is Cipher Strength different from encryption? If
not, how to explain that odd 56-bit number?

In any case, the remainder of the above Microsoft link addresses
updating versions of IE before 6.0.

At this link,
http://www.microsoft.com/windows/ie/ie6/downloads/recommended/128bit/default.mspx,

it says that IE5.5 already includes 128-bits, so IE 6 should also
have it.

On Tools/Internet Options/Advanced, under Security the SSL2.0, SSL3.0
and TLS1.0 boxes are all checked.

I'm using W2k, Professional (SP4, with about 70 hotfixes), so I can't
go to IEv7.

How do I get 128-bit encryption with my version? </paste> PA Bear [MS
MVP] wrote: [You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but
see... Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63


I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

[Please quote this entire post in your reply.]

Have you ever been able to access the bank website using IE6 SP1 on
this
machine? IOW, is this a sudden, new problem or an ongoing one?

Probably not, as I usually use SeaMonkey as my browser. This probably is
my first attempt to use IE with this site, and I did so because I was
having a problem logging in with SM, so using IE was just a test.

Is this your own personal machine or one belonging to your employer,
school, or...?

Personal

What anti-virus application or security suite is installed and is your
subscription current?

I usually use System Mechanic suite, but it isn't installed now.

What anti-spyware applications (other than
Defender)? What third-party firewall (if any)?

None. I'm living dangerously now.

Has a Norton or McAfee application ever been installed?

No

The fact that you're having problems in SM suggests that you may have a
hijackware infection.

Why have you no anti-virus application and no firewall installed now?
That was NOT a wise move, especially if you're having difficulties
reaching secure websites.

Protect Your PC!
http://www.microsoft.com/athome/security/computer/default.mspx

Learn how to protect your PC by taking three simple steps
http://www.microsoft.com/downloads/details.aspx?familyid=3AD23728-4973-4DA5-9836-602954130D38

That being said, I was thinking of suggesting that you
uninstall/reinstall
IE6; however, doing so can be complicated in Win2K. But this leads me to
ask another question in the meantime: Have you ever had occasion to
reinstall Win2K *after* you'd installed IE6 SP1? If you so, did you
uninstall IE6 SP1 before reinstalling Win2K?

May we assume you're running Win2K SP4 now?

 

[Ray K]

Ray K wrote:
<paste>
If I go to Help/About, I see:
- Version 6.0.2800.1106
- Cipher Strength: 56-bit
- Product ID:51873-335-7881281-09075
- Update Versions:;SP1;

I think that the 56-bit strength is what's preventing me from going to
my bank's home page. When I go here,
http://support.microsoft.com/?kbid=195833,
it says that IE supports only 40- and 128-bit encryption.

First question is, Is Cipher Strength different from encryption? If
not,
how to explain that odd 56-bit number?

In any case, the remainder of the above Microsoft link addresses
updating versions of IE before 6.0.

At this link,
http://www.microsoft.com/windows/ie/ie6/downloads/recommended/128bit/default.mspx,


it says that IE5.5 already includes 128-bits, so IE 6 should also
have it.

On Tools/Internet Options/Advanced, under Security the SSL2.0, SSL3.0
and TLS1.0 boxes are all checked.

I'm using W2k, Professional (SP4, with about 70 hotfixes), so I
can't go
to IEv7.

How do I get 128-bit encryption with my version? </paste> PA Bear [MS
MVP] wrote: [You can't install IE7 in Win2K.]

Dunno how you ended up with 56-bit cipher strength in IE6 SP1 but
see...

Windows 2000 High Encryption Pack (128-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyID=c10925a0-ac66-4c44-b5c3-9dcab4da1c63



I did the install. AS I started, it warned me that I already was up to
date and suggested that I exit the install program. I went through the
reinstall anyway. Same results: IE is still at 56-bit cipher strength,
and I still can't connect with my bank.

Is the cipher strength a function of W2k or IE?

[Please quote this entire post in your reply.]

Have you ever been able to access the bank website using IE6 SP1 on this
machine? IOW, is this a sudden, new problem or an ongoing one?

Probably not, as I usually use SeaMonkey as my browser. This probably is
my first attempt to use IE with this site, and I did so because I was
having a problem logging in with SM, so using IE was just a test.

Is this your own personal machine or one belonging to your employer,
school, or...?
Personal

What anti-virus application or security suite is installed and is your
subscription current?

I usually use System Mechanic suite, but it isn't installed now.

What anti-spyware applications (other than

Defender)? What third-party firewall (if any)?

None. I'm living dangerously now.

Has a Norton or McAfee application ever been installed?

No

The fact that you're having problems in SM suggests that you may have a
hijackware infection.

I am NOT having trouble connecting to the bank site with SM; the trouble
is only when using IE.

Why have you no anti-virus application and no firewall installed now?
That was NOT a wise move, especially if you're having difficulties
reaching secure websites.

Protect Your PC!
http://www.microsoft.com/athome/security/computer/default.mspx

Learn how to protect your PC by taking three simple steps
http://www.microsoft.com/downloads/details.aspx?familyid=3AD23728-4973-4DA5-9836-602954130D38


That being said, I was thinking of suggesting that you
uninstall/reinstall IE6; however, doing so can be complicated in Win2K.
But this leads me to ask another question in the meantime: Have you ever
had occasion to reinstall Win2K *after* you'd installed IE6 SP1? If you
so, did you uninstall IE6 SP1 before reinstalling Win2K?

May we assume you're running Win2K SP4 now?

As I recall, the last time I installed W2K was after a reformatting of
C:. Yes, I'm running SP4.

 

[Ray K]

PA

Windows 2000 on the SP2 level still had the IE 56bit encryption.
Installing SP3 and above on W2K brought IE inline with the 128bit
encryption. SP's were not cumulative on W2K. If the OP jumped from SP2
to SP4 he is most likely to have 56 bit as he is saying among other
issues He is missing SP3 which is probably not installed

..

You're right. SP4 gets all the publicity, SP3 virtually none. I do not
have SP3 installed. I'm surprised that 1) SP4 doesn't include everything
in SP3, and 2) SP4 doesn't warn that SP3 is missing and should be
installed first.

I just downloaded a copy of SP3 and attempted to install it. I got the
following message in a Service Pack 3 Setup Error dialog box:

"Setup had detected that the Service Pack version of the system
installed is newer than the update you are applying to it. You can only
install this update on Service Pack 3."

Maybe the problem is that I need a basic SP3, and I was inadverently
trying to apply an update to something not already installed.

So now I'm stuck. According to Add/Remove Programs, I can't uninstall
SP4 so I can first install SP3, then reinstall SP4. Besides, with all
those 70+ hotfixes, I'm not sure what I'd end up with.

I just tried going to fidelity.com using IE; it specifically warned me
that I couldn't continue without 128-bit encryption.

Ray

 

[Ray K]

After scouting around, I came across the following high-encrypt pack for
W2K.

Encpack_Win2000Admin_EN.exe

I D/L'd it to c:\, and ran it. That unpacked three files in c:\, one of
which was ENCPACK.EXE. Once I ran that and rebooted, IE6 went to 128-bit
encryption, and I was able to log into all the troublesome sites.

Thanks, guys, for your suggestions.

Ray

 

[PA Bear [MS MVP]]

YW & thanks for your feedback, Ray.

Are you running Win2K SP4? If so, did you skip installing SP3?

Did you ever reinstall Win2K?

 

[PA Bear [MS MVP]]

You're right. SP4 gets all the publicity, SP3 virtually none. I do not
have SP3 installed. I'm surprised that 1) SP4 doesn't include everything
in SP3, and 2) SP4 doesn't warn that SP3 is missing and should be
installed first.

I just downloaded a copy of SP3 and attempted to install it. I got the
following message in a Service Pack 3 Setup Error dialog box:

"Setup had detected that the Service Pack version of the system
installed is newer than the update you are applying to it. You can only
install this update on Service Pack 3."

Maybe the problem is that I need a basic SP3, and I was inadverently
trying to apply an update to something not already installed.

So now I'm stuck. According to Add/Remove Programs, I can't uninstall
SP4 so I can first install SP3, then reinstall SP4. Besides, with all
those 70+ hotfixes, I'm not sure what I'd end up with.

I just tried going to fidelity.com using IE; it specifically warned me
that I couldn't continue without 128-bit encryption.

As I recall, the last time I installed W2K was after a reformatting of
C:. Yes, I'm running SP4.

</paste>

[We now know that everything was fixed after you'd installed the High
Encryption Pack for Win2K (Encpack_Win2000Admin_EN.exe). PS: Ignore my
reply to that post.]

Did you uninstall IE6 SP1 *before* reinstalling Win2K? (To be able to
uninstall IE6 SP1 in Win2K, you must first uninstall any Service Packs that
were installed after IE6 SP1 was installed.)

 

[Ray K]

YW & thanks for your feedback, Ray.

Are you running Win2K SP4? If so, did you skip installing SP3?

Did you ever reinstall Win2K?

My post of 9:25 a.m. today addresses your questions. Yes to SP4; no to SP3.

Regarding W2K, I did a fresh install (I don't know if that's the same as
a reinstall)
several months ago on a newly formatted C: drive.

Ray

 

[PA Bear [MS MVP]]

Reply to my post in your original thread, please, Ray. (When you change the
subject, it becomes a new thread for those of us using OE Newsreader.)

 

[Ray K]

PA

Windows 2000 on the SP2 level still had the IE 56bit encryption. R
Installing SP3 and above on W2K brought IE inline with the 128bit
encryption. SP's were not cumulative on W2K. If the OP jumped from SP2
to SP4 he is most likely to have 56 bit as he is saying among other
issues He is missing SP3 which is probably not installed

Not so. Each SP includes all the previous ones as well as the new fixes.

Here's what Microsoft says:

"Updates and fixes to Microsoft Windows 2000 are distributed in service
packs. Service packs keep the product current. Service packs include
updates, system administration tools, drivers, and additional components
that are conveniently bundled for easy downloading. Service packs are
cumulative. Therefore, each new service pack contains all the fixes that
are included in previous service packs together with the new fixes. You
do not have to install a previous service pack before you install the
latest service pack. For example, you do not have to install Windows
2000 Service Pack 3 (SP3) before you install Windows 2000 Service Pack 4
(SP4)."

http://support.microsoft.com/kb/260910/EN-US/


Ray K.

 

[PA Bear [MS MVP]]

[It's very likely that your reinstall of Win2K without having first
uninstalled IE6 SP1 (and any SPs installed after IE6 SP1 was installed)
caused your predicament, Ray.]