Hardening your SSL/TLS connections is very common thing to do on any Windows Server running IIS that utilize HTTPS to ensure your secure connections really are secure.
IIS Crypto 2.0 definitely make your life easier. Just apply the best practices.
Reference: https://www.nartac.com/Products/IISCrypto
Advertisements
Further hardening your IIS Server with URL Rewrite by removing server information from http response header.
Reference: https://blogs.msdn.microsoft.com/varunm/2013/04/23/remove-unwanted-http-response-headers/