SchannelPolicyDsc

SchannelPolicyDsc is a module written to provide PowerShell DSC configuration resources to manipulate Schannel.

Resources

• Cipher: Provides a mechanism to set individual ciphers.
• CipherSuites: Provides a mechanism to set cipher suite order.
• Hash: Provides a mechanism to set individual hash functions.
• KeyExchangeAlgorithm: Provides a mechanism to set individual key exchange algorithms.
• Protocol: Provides a mechanism to set individual protocols.

Cipher

Provides a mechanism to set individual ciphers.

Requirements

None

Parameters

• [String] Cipher (Key): The name of the cipher you want to configure. { AES 128/128 | AES 256/256 | DES 56/56 | NULL | RC2 128/128 | RC2 40/128 | RC2 56/128 | RC4 128/128 | RC4 40/128 | RC4 56/128 | RC4 64/128 | Triple DES 168 }
• [String] Ensure (Write): The desired state of the cipher. { Present | Absent }

Read-Only Properties from Get-TargetResource

• [String] Enabled (Write): The current state of the cipher. { Yes | No }

Examples

• Configure a cipher

CipherSuites

PProvides a mechanism to set cipher suite order.

Requirements

None

Parameters

• [String] IsSingleInstance (Key): This value must be set to "Yes". { Yes }
• [String[]] CipherSuitesOrder (Write): Array of ciphers in order of preference.
• [String] Ensure (Write): The desired state of the cipher suite order. { Present | Absent }

Read-Only Properties from Get-TargetResource

• [String] Exists (Write): The current state of the cipher suite order. { Yes | No }

Examples

• Configure a cipher suite order

Hash

Provides a mechanism to set individual hash functions.

Requirements

None

Parameters

• [String] Hash (Key): The name of the hash function you want to configure. { MD5 | SHA | SHA256 | SHA384 | SHA512 }
• [String] Ensure (Write): The desired state of the hash function. { Present | Absent }

Read-Only Properties from Get-TargetResource

• [String] Exists (Write): The current state of the hash function. { Yes | No }

Examples

• Configure a hash function

KeyExchangeAlgorithm

Provides a mechanism to set individual key exchange algorithms.

Requirements

None

Parameters

• [String] Hash (Key): The name of the key exchange algorithm you want to configure. { Diffie-Hellman | ECDH | PKCS }
• [String] Ensure (Write): The desired state of the key exchange algorithm. { Present | Absent }

Read-Only Properties from Get-TargetResource

• [String] Exists (Write): The current state of the key exchange algorithm. { Yes | No }

Examples

• Configure a key exchange algorithm

Protocol

Provides a mechanism to set individual protocols.

Requirements

None

Parameters

• [String] Hash (Key): The name of the protocol you want to configure. { Multi-Protocol Unified Hello | PCT 1.0 | SSL 2.0 | SSL 3.0 | TLS 1.0 | TLS 1.1 | TLS 1.2 }
• [String] Type (Key): The type of the protocol you want to configure. { Client | Server }
• [String] Ensure (Write): The desired state of the protocol. { Present | Absent }

Read-Only Properties from Get-TargetResource

• [String] Exists (Write): The current state of the protocol. { Yes | No }

Examples

• Configure a protocol

Versions

1.0.0

• Initial release of SchannelPolicyDsc.