Edit

Share via

Add-HgsKeyProtectionAttestationSignerCertificate

  • Reference
Module:
HgsKeyProtection

Adds an attestation signer certificate for the trusted certificates for the Key Protection Service.

Syntax

Add-HgsKeyProtectionAttestationSignerCertificate
   -Certificate <X509Certificate2>
   [-Force]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The Add-HgsKeyProtectionAttestationSignerCertificate cmdlet adds the signer certificate of an attestation server to the list of certificates that the Key Protection Service trusts. The Key Protection Service uses attestation signer certificates to verify the signatures of health certificates. To modify the policy for an attestation signer certificate, use the Set-HgsKeyProtectionAttestationSignerCertificatePolicy cmdlet.

Examples

Example 1: Add a certificate

PS C:\> Add-HgsKeyProtectionAttestationSignerCertificate -Certificate $Certificate

This command adds the certificate stored in the $Certificate variable to the trusted attestation signer certificates.

Parameters

-Certificate

Specifies an X509Certificate2 certificate. This cmdlet adds the certificate that this parameter specifies to the attestation signer certificates that the Key Protection Service trusts. Specify a variable that stores an X509Certificate2 object or an expression that gets the certificate.

Type:X509Certificate2
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

None

You cannot pipe input to this cmdlet.

Outputs

None

This cmdlet does not generate any output.