ssl on IIS

our office runs a donations payment process through an IIS server. i have been made aware recently that we are not up to date with our ssl ciphers (apparently only running version 2 at the moment). how would i go about fixing this? is it as easy as a defined disabling and enabling regedit process?