Skip to content
PowerShell Commands

Get-TlsCipherSuite

Get-TlsCipherSuite [[-Name] <String>] [<CommonParameters>]

The Get-TlsCipherSuite cmdlet gets the ordered list of cipher suites for a computer that Transport Layer Security (TLS) can use.

For more information about the TLS cipher suites, see the documentation for the Enable-TlsCipherSuite cmdlet or type Get-Help Enable-TlsCipherSuite.

Parameters

-Name [<String>]

Specifies the name of the TLS cipher suite to get. The cmdlet gets cipher suites that match the string that this cmdlet specifies, so you can specify a partial name.

<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,ErrorAction, ErrorVariable, WarningAction, WarningVariable,OutBuffer, PipelineVariable, and OutVariable.

Examples
  1. Get all cipher suites:
    PS C:\> Get-TlsCipherSuite
KeyType               : 0
Certificate           : RSA
MaximumExchangeLength : 65536
MinimumExchangeLength : 0
Exchange              : ECDH
HashLength            : 0
Hash                  : CipherBlockLength     : 16
CipherLength          : 256
BaseCipherSuite       : 49200
CipherSuite           : 49200
Cipher                : AES
Name                  : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Protocols             : {771}

   KeyType               : 0
   Certificate           : RSA
   MaximumExchangeLength : 65536
   MinimumExchangeLength : 0
   Exchange              : ECDH
   HashLength            : 0
   Hash                  : 
   CipherBlockLength     : 16
   CipherLength          : 128
   BaseCipherSuite       : 49199
   CipherSuite           : 49199
   Cipher                : AES
   Name                  : TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
   Protocols             : {771}

    This command gets all TLS cipher suites for the computer.

  2. Get the cipher suites that match a string:
    PS C:\> Get-TlsCipherSuite -Name "SSL"
KeyType               : 0
Certificate           : RSA
MaximumExchangeLength : 16384
MinimumExchangeLength : 512
Exchange              : RSA
HashLength            : 128
Hash                  : MD5
CipherBlockLength     : 1
CipherLength          : 128
BaseCipherSuite       : 65664
CipherSuite           : 65664
Cipher                : RC4
Name                  : SSL_CK_RC4_128_WITH_MD5
Protocols             : {2}

   KeyType               : 0
   Certificate           : 
   MaximumExchangeLength : 0
   MinimumExchangeLength : 0
   Exchange              : 
   HashLength            : 0
   Hash                  : 
   CipherBlockLength     : 0
   CipherLength          : 0
   BaseCipherSuite       : 0
   CipherSuite           : 0
   Cipher                : 
   Name                  : SSL_CK_DES_192_EDE3_CBC_WITH_MD5
   Protocols             : {}

    This command gets all the cipher suites that have names that contain the string SSL.

This work is licensed under a Creative Commons Attribution 4.0 International. It is attributed to Microsoft Corporation and can be found here.

PowerShell Commands