Internet Information Services
Microsoft web server software.
1,637 questions
Session Resumption Not Working on Windows Server 2022 with IIS 10
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 23%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMD%3C/text%3E%3C/svg%3E)
Michał Dedyk
5
Reputation points
Hello everyone,
I hope someone can help me with an issue I am facing after upgrading my server. I was previously using Windows Server 2012 R2 with IIS 8.5, and my .NET server's session resumption worked perfectly. When I tested my site on ssllabs, it showed "Session resumption (caching)" as "Yes." Everything seemed to be working as expected.
However, I recently decided to upgrade to Windows Server 2022 and started using IIS 10. Now, when I test my site on ssllabs, I get "Session resumption (caching): No (IDs assigned but not accepted)." It seems that session resumption is not working anymore after the upgrade. Just for your information, I am supporting only TLS 1.2 and TLS 1.3 on my new server.
I would really appreciate any guidance on how to enable session resumption on Windows Server 2022 with IIS 10. If anyone has encountered a similar problem or knows the steps to resolve this issue, please share your insights.
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 70%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYD%3C/text%3E%3C/svg%3E)
Yurong Dai-MSFT 2,811 Reputation points Microsoft Vendor2023-05-03T09:50:38.6233333+00:00 Hi @Michał Dedyk,
You need to make sure that session tickets are enabled in your server's SSL/TLS configuration. Session tickets are a mechanism used by some SSL/TLS implementations to enable session resumption.
Open Registry Editor and navigate toHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\EnableSslSessionTicketIf it exists and set the value to1, then enable session tickets. -
Michał Dedyk 5 Reputation points
2023-05-04T07:25:34.9+00:00 Thank you for your suggestion. I have followed your advice and added the "EnableSslSessionTicket" key with the value set to 1 in the following registry path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\ParametersUnfortunately, this change did not resolve the issue.
Additionally, I've also generated a new key using the PS command: New-TlsSessionTicketKey
And enabled it using: Enable-TlsSessionTicketKey
However, this method didn't work for me either.
-
Yurong Dai-MSFT 2,811 Reputation points Microsoft Vendor
2023-05-05T09:42:40.41+00:00 Hi @Michał Dedyk, You need to check the current configuration of the session cache. I think it's hard to help much with this particular problem, since the problem is server-specific. So I suggest you open a case via: https://support.microsoft.com There will be professional technicians to assist you in analyzing and solving problems.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 90%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKS%3C/text%3E%3C/svg%3E)
Kimbo Slice 0 Reputation points2023-12-22T00:38:11.58+00:00 Same issue here, MS has no documentation on getting Session resumption working on IIS. And they love the excuse "the problem is server specific" <-- this is no answer, stop saying it.
Sign in to comment