Disable-TlsSessionTicketKey
Disable-TlsSessionTicketKey
Disables a TLS session ticket key.
语法
Parameter Set: Default
Disable-TlsSessionTicketKey [-ServiceAccountName] <NTAccount> [-Confirm] [-WhatIf] [ <CommonParameters>]
详细说明
The Disable-TlsSessionTicketKey cmdlet disables an administrator managed Transport Layer Security (TLS) session ticket key for the service account. The cmdlet disables the key for the TLS session by deleting the key and the corresponding rule that uses the key.
When you disable a TLS session ticket key for the service account, the service account cannot decrypt existing TLS session tickets. Disabling the TLS session ticket key can affect the performance of the TLS server. The TLS server cannot create new session tickets and must negotiate session information between the client and the server every time the client connects to the TLS server.
TLS creates a session ticket by using the Transport Layer Security (TLS) Session Resumption without Server-Side State mechanism [RFC 5077]. This mechanism helps to improve the performance of TLS. The TLS server uses this mechanism to create a key to encrypt a session ticket. The client can later use the encrypted session ticket to resume communication with the TLS server. Otherwise, the client must restart the communication by acquiring a new session ticket. For more information, see RFC 5077, "Transport Layer Security (TLS) Session Resumption without Server-Side State."
参数
-ServiceAccountName<NTAccount>
Specifies the name of a service account. The cmdlet disables the TLS session ticket key for the service account.
别名 |
无 |
是否为必需？ |
true |
位置？ |
1 |
默认值 |
无 |
是否接受管道输入？ |
false |
是否接受通配符？ |
false |
-Confirm
运行 cmdlet 之前提示你进行确认。
是否为必需？ |
false |
位置？ |
named |
默认值 |
false |
是否接受管道输入？ |
false |
是否接受通配符？ |
false |
-WhatIf
显示如果运行 cmdlet 则会发生什么情况。cmdlet 未运行。
是否为必需？ |
false |
位置？ |
named |
默认值 |
false |
是否接受管道输入？ |
false |
是否接受通配符？ |
false |
<CommonParameters>
此 cmdlet 支持通用参数：-Verbose、-Debug、-ErrorAction、-ErrorVariable、-OutBuffer 和 -OutVariable。有关详细信息，请参阅 about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
输入
输入类型是指可通过管道传送给 cmdlet 的对象的类型。
输出
输出类型是 cmdlet 所发出对象的类型。
示例
Example 1: Disable a TLS session ticket key.
This command disables the TLS session ticket key for the service account named Networkservice.
PS C:\> Disable-TlsSessionTicketKey -ServiceAccountName "Networkservice"