On the server side disable support TLS 1.1 and TLS 1.2 for server role in SCHANNEL(Windows Crypto) via registry: Windows Registry Editor Version 5.00 ...