Skip to content
PowerShell Commands

Get-TlsCipherSuite

Get-TlsCipherSuite [[-Name] <String>] [<CommonParameters>]

The Get-TlsCipherSuite cmdlet gets the ordered list of cipher suites for a computer that Transport Layer Security (TLS) can use.

For more information about the TLS cipher suites, see the documentation for the Enable-TlsCipherSuite cmdlet or type Get-Help Enable-TlsCipherSuite.

Parameters

-Name [<String>]

  • Accepts pipeline input ByValue

Specifies the name of the TLS cipher suite to get. The cmdlet gets cipher suites that match the string that this cmdlet specifies, so you can specify a partial name.

<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,ErrorAction, ErrorVariable, WarningAction, WarningVariable,OutBuffer, PipelineVariable, and OutVariable.

Examples
  1. Get all cipher suites: 
    PS C:\> Get-TlsCipherSuite
KeyType               : 0
Certificate           : RSA
MaximumExchangeLength : 65536
MinimumExchangeLength : 0
Exchange              : ECDH
HashLength            : 0
Hash                  : CipherBlockLength     : 16
CipherLength          : 256
BaseCipherSuite       : 49200
CipherSuite           : 49200
Cipher                : AES
Name                  : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Protocols             : {771}

   KeyType               : 0
   Certificate           : RSA
   MaximumExchangeLength : 65536
   MinimumExchangeLength : 0
   Exchange              : ECDH
   HashLength            : 0
   Hash                  : 
   CipherBlockLength     : 16
   CipherLength          : 128
   BaseCipherSuite       : 49199
   CipherSuite           : 49199
   Cipher                : AES
   Name                  : TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
   Protocols             : {771}

    This command gets all TLS cipher suites for the computer.

  2. Get the cipher suites that match a string: 
    PS C:\> Get-TlsCipherSuite -Name "SSL"
KeyType               : 0
Certificate           : RSA
MaximumExchangeLength : 16384
MinimumExchangeLength : 512
Exchange              : RSA
HashLength            : 128
Hash                  : MD5
CipherBlockLength     : 1
CipherLength          : 128
BaseCipherSuite       : 65664
CipherSuite           : 65664
Cipher                : RC4
Name                  : SSL_CK_RC4_128_WITH_MD5
Protocols             : {2}

   KeyType               : 0
   Certificate           : 
   MaximumExchangeLength : 0
   MinimumExchangeLength : 0
   Exchange              : 
   HashLength            : 0
   Hash                  : 
   CipherBlockLength     : 0
   CipherLength          : 0
   BaseCipherSuite       : 0
   CipherSuite           : 0
   Cipher                : 
   Name                  : SSL_CK_DES_192_EDE3_CBC_WITH_MD5
   Protocols             : {}

    This command gets all the cipher suites that have names that contain the string SSL.

This work is licensed under a Creative Commons Attribution 4.0 International. It is attributed to Microsoft Corporation and can be found here.

PowerShell Commands