Internet Information Services
Microsoft web server software.
1,324 questions
Session Resumption Not Working on Windows Server 2022 with IIS 10
Michał Dedyk
0
Reputation points
Hello everyone,
I hope someone can help me with an issue I am facing after upgrading my server. I was previously using Windows Server 2012 R2 with IIS 8.5, and my .NET server's session resumption worked perfectly. When I tested my site on ssllabs, it showed "Session resumption (caching)" as "Yes." Everything seemed to be working as expected.
However, I recently decided to upgrade to Windows Server 2022 and started using IIS 10. Now, when I test my site on ssllabs, I get "Session resumption (caching): No (IDs assigned but not accepted)." It seems that session resumption is not working anymore after the upgrade. Just for your information, I am supporting only TLS 1.2 and TLS 1.3 on my new server.
I would really appreciate any guidance on how to enable session resumption on Windows Server 2022 with IIS 10. If anyone has encountered a similar problem or knows the steps to resolve this issue, please share your insights.
{count} votes
-
Yurong Dai-MSFT 1,576 Reputation points Microsoft Vendor
2023-05-03T09:50:38.6233333+00:00 Hi @Michał Dedyk,
You need to make sure that session tickets are enabled in your server's SSL/TLS configuration. Session tickets are a mechanism used by some SSL/TLS implementations to enable session resumption.
Open Registry Editor and navigate toHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\EnableSslSessionTicketIf it exists and set the value to1, then enable session tickets. -
Michał Dedyk 0 Reputation points
2023-05-04T07:25:34.9+00:00 Thank you for your suggestion. I have followed your advice and added the "EnableSslSessionTicket" key with the value set to 1 in the following registry path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\ParametersUnfortunately, this change did not resolve the issue.
Additionally, I've also generated a new key using the PS command: New-TlsSessionTicketKey
And enabled it using: Enable-TlsSessionTicketKey
However, this method didn't work for me either.
-
Yurong Dai-MSFT 1,576 Reputation points Microsoft Vendor
2023-05-05T09:42:40.41+00:00 Hi @Michał Dedyk, You need to check the current configuration of the session cache. I think it's hard to help much with this particular problem, since the problem is server-specific. So I suggest you open a case via: https://support.microsoft.com There will be professional technicians to assist you in analyzing and solving problems.
Sign in to comment