diff --git a/ChangeLog b/ChangeLog
index 5c228423..7194efed 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,7 @@ Easy-RSA 3 ChangeLog
 
 3.2.1 (TBD)
 
+   * Windows secure_session(): Ensure $secured_session dir is created (d99b242) (#1203)
    * Switch to '-f' for file existence (6ab98c9..a02f545) (#1201)
    * inline: Move auto-inline from build_full() to sign_req() (823f70f) (#1201)
    * gen-crl: Create additional CRL in DER format (69df0d8) (#1198)
diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index e4281bcc..fca04663 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -786,6 +786,10 @@ secure_session() {
 
 		# atomic:
 		if mkdir "$secured_session"; then
+			# Check mkdir.exe has created the directory
+			[ -d "$secured_session" ] || \
+				die "secure_session - mkdir FAILED"
+
 			# New session requires safe-ssl conf
 			unset -v OPENSSL_CONF safe_ssl_cnf_tmp \
 				working_safe_ssl_conf working_safe_org_conf