Skip to content
dscbot edited this page Jan 28, 2026 · 5 revisions

Parameters

Parameter Attribute DataType Description Allowed Values
Cipher Key String Specifies the Cipher to configure AES 128/128, AES 256/256, DES 56/56, NULL, RC2 128/128, RC2 40/128, RC2 56/128, RC4 128/128, RC4 40/128, RC4 56/128, RC4 64/128, Triple DES 168
RebootWhenRequired Write Boolean Specifies if a reboot will be performed when required (Default: False)
State Write String Specifies the state of the Cipher Enabled, Disabled, Default

Description

This resource is responsible for enabling or disabling ciphers.

Examples

Example 1

This example shows how to enable the AES 128/128 hash.

Configuration Example
{
    param ()

    Import-DscResource -ModuleName SChannelDsc

    node localhost {
        Cipher EnableAES128
        {
            Cipher = 'AES 128/128'
            State  = 'Enabled'
        }
    }
}

Example 2

This example shows how to disable the AES 128/128 hash.

Configuration Example
{
    param ()

    Import-DscResource -ModuleName SChannelDsc

    node localhost {
        Cipher DisableAES128
        {
            Cipher = 'AES 128/128'
            State  = 'Disabled'
        }
    }
}

Example 3

This example shows how to reset the AES 128/128 cipher to the OS default.

Configuration Example
{
    param ()

    Import-DscResource -ModuleName SChannelDsc

    node localhost {
        Cipher DisableAES128
        {
            Cipher = 'AES 128/128'
            State  = 'Default'
        }
    }
}

Clone this wiki locally