Examples/Sample_ConfigureACipherSuiteOrder.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<#
    .SYNOPSIS
        Configures the preferred cipher suite order.
#>

Configuration Sample_ConfigureACipherSuiteOrder {
    Import-DscResource -ModuleName 'SchannelPolicyDsc'

    Node localhost {
        CipherSuites "Set Cipher Suite Order" {
            IsSingleInstance = "Yes"
            CipherSuitesOrder = @('TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P521',
                                  'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384',
                                  'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256',
                                  'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P521',
                                  'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384',
                                  'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256',
                                  'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P521',
                                  'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384',
                                  'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256',
                                  'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P521',
                                  'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384',
                                  'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P521',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P521',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P521',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P521',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P384',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P521',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384',
                                  'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P521',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384',
                                  'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256')
        }
    }
}