Disable-TlsSessionTicketKey
Disable-TlsSessionTicketKey
Disables a TLS session ticket key.
Sintaxe
Parameter Set: Default
Disable-TlsSessionTicketKey [-ServiceAccountName] <NTAccount> [-Confirm] [-WhatIf] [ <CommonParameters>]
Descrição detalhada
The Disable-TlsSessionTicketKey cmdlet disables an administrator managed Transport Layer Security (TLS) session ticket key for the service account. The cmdlet disables the key for the TLS session by deleting the key and the corresponding rule that uses the key.
When you disable a TLS session ticket key for the service account, the service account cannot decrypt existing TLS session tickets. Disabling the TLS session ticket key can affect the performance of the TLS server. The TLS server cannot create new session tickets and must negotiate session information between the client and the server every time the client connects to the TLS server.
TLS creates a session ticket by using the Transport Layer Security (TLS) Session Resumption without Server-Side State mechanism [RFC 5077]. This mechanism helps to improve the performance of TLS. The TLS server uses this mechanism to create a key to encrypt a session ticket. The client can later use the encrypted session ticket to resume communication with the TLS server. Otherwise, the client must restart the communication by acquiring a new session ticket. For more information, see RFC 5077, "Transport Layer Security (TLS) Session Resumption without Server-Side State."
Parâmetros
-ServiceAccountName<NTAccount>
Specifies the name of a service account. The cmdlet disables the TLS session ticket key for the service account.
Aliases |
nenhuma |
Necessário? |
true |
Posição? |
1 |
Valor padrão |
nenhuma |
Aceitar entrada do pipeline? |
false |
Aceitar caracteres curinga? |
false |
-Confirm
Solicita que você confirme antes de executar o cmdlet.
Necessário? |
false |
Posição? |
named |
Valor padrão |
false |
Aceitar entrada do pipeline? |
false |
Aceitar caracteres curinga? |
false |
-WhatIf
Mostra o que aconteceria se o cmdlet fosse executado. O cmdlet não é executado.
Necessário? |
false |
Posição? |
named |
Valor padrão |
false |
Aceitar entrada do pipeline? |
false |
Aceitar caracteres curinga? |
false |
<CommonParameters>
Esse cmdlet dá suporte a parâmetros comuns: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer e -OutVariable. Para obter mais informações, consulte about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
Entradas
O tipo de entrada é o tipo dos objetos que você pode canalizar para o cmdlet.
Saídas
O tipo de saída é o tipo de objeto emitido pelo cmdlet.
Exemplos
Example 1: Disable a TLS session ticket key.
This command disables the TLS session ticket key for the service account named Networkservice.
PS C:\> Disable-TlsSessionTicketKey -ServiceAccountName "Networkservice"