powershellssltls1.2comexception

Why do I get Exception from HRESULT: 0xD0000225 when running Disable-TlsCipherSuite?


When I disable the cipher TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 in PowerShell running on a Windows server, I got this error message:

Disable-TlsCipherSuite : Exception from HRESULT: 0xD0000225
At line:1 char:1
+ Disable-TlsCipherSuite -Name "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Disable-TlsCipherSuite], COMException
    + FullyQualifiedErrorId : Exception from HRESULT: 0xD0000225,Microsoft.WindowsAuthenticationProtocols.Commands.RemoveTlsCipherSuiteCommand

What does the error mean, and how do I fix it?


Solution

  • The error simply indicate the cipher is already disabled....

    try Enable-TlsCipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 and Disable-TlsCipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 no error should appear