Every once in a while, a Lync admin gets to experience the true horror of changing crypto settings. More often than not, this is through following a series of registry edits found online, either on TechNet or a helpful looking blog.

IIS Crypto is a tool that allows you to fiddle with the protocols, cyphers, hashes, key exchanges and cypher suite order, all in a nicely put together GUI. Better yet, there are templates that’ll set your server to Best Practices, PCI, FIPS140-2, and Windows Defaults. That last one comes in really handy when that helpful looking blog turns out to be not so helpful, and your notes on what keys you changed in RegEdit aren’t so clear.