PowerShell Logo Small


This is the built-in help made by Microsoft for the command 'New-TlsSessionTicketKey', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.


Creates a TLS session ticket key configuration file.


New-TlsSessionTicketKey [-Password] <SecureString> [[-Path] [<String>]] [<CommonParameters>]

Search powershellhelp.space


The New-TlsSessionTicketKey cmdlet creates a password protected Transport Layer Security (TLS) Session Ticket key configuration file.

TLS creates a session ticket by using the TLS Session Resumption without Server-Side State mechanism. This mechanism helps to improve the performance of TLS. The TLS server
uses this mechanism to create a key to encrypt a session ticket. The client can later use the encrypted session ticket to resume communication with the TLS server.
Otherwise, the client must restart the communication by acquiring of new session ticket. For more information, see RFC 5077, Transport Layer Security (TLS) Session
Resumption without Server-Side State.



Online Version: http://go.microsoft.com/fwlink/?LinkId=294410




Example 1: Create a TLS session ticket key

PS C:\> $Password = Read-Host -AsSecureString
PS C:\> New-TlsSessionTicketKey -Password $Password -Path "C:\KeyConfig\TlsSessionTicketKey.config"

The first command prompts the user to enter a password by using the Read-Host cmdlet. The command masks the password that the user types at the prompt. For more information,
type Get-Help Read-Host. The command stores the password in the $Password variable.

The second command creates the session ticket key configuration file which can be used to enable the TLS session ticket for a service account. The command specifies the path
for the output configuration file on the TLS server, and specifies that the TLS session use the password stored in $Password to access the configuration file.