TLS / SSL Status

Illustrative example. This lab's machines are workgroup, not domain-joined, so the remote registry/certificate-store check this command relies on for anything beyond the local computer cannot complete over WinRM here. Certificate subjects and thumbprints below are representative placeholders. Values below are representative, not measured output.

OK: 1 | Warning: 1 | Critical: 0

Status	Computer	Instance	ForceEncryption	Cert Subject	Cert Expiry	Trusted	TLS 1.0	TLS 1.1	TLS 1.2	TLS 1.3	Details
OK	SQL01	MSSQLSERVER	1	CN=sql01.contoso.local	2027-03-14 (238 days)	Yes	Disabled	Disabled	Enabled	Enabled	All checks passed
Warning	SQL02	MSSQLSERVER	0	CN=sql02.contoso.local	2026-08-30 (41 days)	Yes	Enabled	Disabled	Enabled	Enabled	ForceEncryption = 0; TLS 1.0 enabled; cert expires in 41 days

Warning thresholds: certificate expiring within 60 days, ForceEncryption disabled, TLS 1.0/1.1 enabled, or no certificate explicitly bound (auto-generated self-signed cert in use). Critical: certificate not found in the local machine store, chain not trusted, or already expired.