How to Check TLS\SSL

Question

Hi Team,

i would like to know how can check all the SSL\TLS status from command or powershell in window server.

or just can check from regedit ?

-D-

Answer 1

@D-NESH I use powershell command Get-TlsCipherSuite on a windows server to list all cipher suites.

-----------------------------------------------------------------------------------------------------------------

If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

Answer 2

You can use below command to get better results.

Get-TLSCipherSuite | ft name,certificate,cipherlenght

Answer 3

Hi @D-NESH ,

You could create a PowerShell script that checks the TLS & SSL registry entries mentioned in the following documentation:
https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings

You'll also find the default TLS & SSL settings on different Windows operating systems over here:
https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-

Another easy way to check these settings is by using the free tool from Nartac:
https://www.nartac.com/Products/IISCrypto/

----------

(If the reply was helpful please don't forget to upvote or accept as answer, thank you)

Best regards,
Leon