Skip to content
PowerShell Commands

Get-TlsCipherSuite

Get-TlsCipherSuite [[-Name] <String>] [<CommonParameters>]

The Get-TlsCipherSuite cmdlet gets the ordered list of cipher suites for a computer that Transport Layer Security (TLS) can use.

For more information about the TLS cipher suites, see the documentation for the Enable-TlsCipherSuite cmdlet or type Get-Help Enable-TlsCipherSuite.

Parameters

-Name [<String>]

  • Accepts pipeline input ByValue

Specifies the name of the TLS cipher suite to get. The cmdlet gets cipher suites that match the string that this cmdlet specifies, so you can specify a partial name.

<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,ErrorAction, ErrorVariable, WarningAction, WarningVariable,OutBuffer, PipelineVariable, and OutVariable.

Examples
  1. Get all cipher suites:
    PS C:\> Get-TlsCipherSuite
    KeyType               : 0
    Certificate           : RSA
    MaximumExchangeLength : 65536
    MinimumExchangeLength : 0
    Exchange              : ECDH
    HashLength            : 0
    Hash                  : CipherBlockLength     : 16
    CipherLength          : 256
    BaseCipherSuite       : 49200
    CipherSuite           : 49200
    Cipher                : AES
    Name                  : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    Protocols             : {771}
    
       KeyType               : 0
       Certificate           : RSA
       MaximumExchangeLength : 65536
       MinimumExchangeLength : 0
       Exchange              : ECDH
       HashLength            : 0
       Hash                  : 
       CipherBlockLength     : 16
       CipherLength          : 128
       BaseCipherSuite       : 49199
       CipherSuite           : 49199
       Cipher                : AES
       Name                  : TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
       Protocols             : {771}

    This command gets all TLS cipher suites for the computer.

  2. Get the cipher suites that match a string:
    PS C:\> Get-TlsCipherSuite -Name "SSL"
    KeyType               : 0
    Certificate           : RSA
    MaximumExchangeLength : 16384
    MinimumExchangeLength : 512
    Exchange              : RSA
    HashLength            : 128
    Hash                  : MD5
    CipherBlockLength     : 1
    CipherLength          : 128
    BaseCipherSuite       : 65664
    CipherSuite           : 65664
    Cipher                : RC4
    Name                  : SSL_CK_RC4_128_WITH_MD5
    Protocols             : {2}
    
       KeyType               : 0
       Certificate           : 
       MaximumExchangeLength : 0
       MinimumExchangeLength : 0
       Exchange              : 
       HashLength            : 0
       Hash                  : 
       CipherBlockLength     : 0
       CipherLength          : 0
       BaseCipherSuite       : 0
       CipherSuite           : 0
       Cipher                : 
       Name                  : SSL_CK_DES_192_EDE3_CBC_WITH_MD5
       Protocols             : {}

    This command gets all the cipher suites that have names that contain the string SSL.

This work is licensed under a Creative Commons Attribution 4.0 International. It is attributed to Microsoft Corporation and can be found here.

PowerShell Commands