How to enable TLS session resumption or Optimize TLS handshake on Windows 2016

Hi,

We are facing issue on windows 2016. The issue is when more than 15-20 users request token the W3wp (IIS 10) and lsass.exe using 100% CPU. By monitoring using WPA and Network Monitor we saw TLS handshake happening for each request.

I have checked numerous articles which mentioned about getting better performance with TLS session resumption. I don't get clear answer how to do enable TLS session resumption in IIS 10 on Windows 2016.

Is TLS session resumption related to high CPU? What I mean to say is if we implement TLS session resumption will it affect CPU usage?

Thanks