diff --git a/docs/pages/includes/install-windows.mdx b/docs/pages/includes/install-windows.mdx
index 16eecad304ad6..c4fac31d45f1d 100644
--- a/docs/pages/includes/install-windows.mdx
+++ b/docs/pages/includes/install-windows.mdx
@@ -2,16 +2,18 @@ Starting with Teleport v7.2.0, most `tsh` features are supported for Windows 10
 1607+. The `tsh ssh` command can be run under `cmd.exe`, PowerShell, and Windows
 Terminal.
 
-To install `tsh` on Windows, run the following commands in PowerShell:
+To install `tsh` on Windows, run the following commands in **PowerShell** (these commands will not work in `cmd.exe`):
 
   ```code
+  # Set the TLS level to TLS 1.2 (required on Windows Server 2016 and lower)
+  $ [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
   # Get the expected checksum for the Windows tsh package
   $ $Resp = Invoke-WebRequest https://get.gravitational.com/teleport-v(=teleport.version=)-windows-amd64-bin.zip.sha256
   # PowerShell will return the binary representation of the response content
   # by default, so you need to convert it to a string
   $ [System.Text.Encoding]::UTF8.getstring($Resp.Content)
   # <checksum> <filename>
-  $ curl -O https://cdn.teleport.dev/teleport-v(=teleport.version=)-windows-amd64-bin.zip
+  $ Invoke-WebRequest -OutFile teleport-v(=teleport.version=)-windows-amd64-bin.zip -Uri https://cdn.teleport.dev/teleport-v(=teleport.version=)-windows-amd64-bin.zip
   $ certUtil -hashfile teleport-v(=teleport.version=)-windows-amd64-bin.zip SHA256
   # SHA256 hash of teleport-v(=teleport.version=)-windows-amd64-bin.zip:
   # <checksum>