question

CallMeD-9066 avatar image
0 Votes"
CallMeD-9066 asked MridulKumarSingh-4134 answered

How to Check TLS\SSL

Hi Team,

i would like to know how can check all the SSL\TLS status from command or powershell in window server.

or just can check from regedit ?

-D-

windows-server
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @CallMeD-9066,

Thank you so much for posting here.

We are checking in to see if the provided information was helpful. If the reply is helpful, we would appreciate you to accept it as answer.

Please let us know if you would like further assistance. Thanks.

Best Regards,
Hannah Xiong

0 Votes 0 ·

Hello @CallMeD-9066,

Does this question have any update or has this issue been solved? Also, for the question, is there any other assistance we could provide?

Besides, there is email notifications function on this forum. It is suggested that we could set it up so that we could receive prompts for responses in time.
https://docs.microsoft.com/en-us/answers/articles/67444/email-notifications.html

Thank you so much for your time and support.

Best regards,
Hannah Xiong


0 Votes 0 ·
LeonLaude avatar image
0 Votes"
LeonLaude answered LeonLaude edited

Hi @CallMeD-9066,

You could create a PowerShell script that checks the TLS & SSL registry entries mentioned in the following documentation:
https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings

You'll also find the default TLS & SSL settings on different Windows operating systems over here:
https://docs.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-

Another easy way to check these settings is by using the free tool from Nartac:
https://www.nartac.com/Products/IISCrypto/


(If the reply was helpful please don't forget to upvote or accept as answer, thank you)


Best regards,
Leon

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT avatar image
3 Votes"
vipulsparsh-MSFT answered

@CallMeD-9066 I use powershell command Get-TlsCipherSuite on a windows server to list all cipher suites.

30825-tls.png


If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.




tls.png (30.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MridulKumarSingh-4134 avatar image
0 Votes"
MridulKumarSingh-4134 answered

You can use below command to get better results.

Get-TLSCipherSuite | ft name,certificate,cipherlenght

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.