Share via

Grant method of the MSFT_HgsKeyProtector class

  • Article

Grants access to a key protected by a key protector to a given guardian. This operation requires access to the owner signing private key, to prove ownership.

Syntax

uint32 Grant(
  [in]  MSFT_HgsKeyProtector KeyProtector,
  [in]  MSFT_HgsGuardian     Guardian,
  [in]  boolean              AllowExpired,
  [in]  boolean              AllowUntrustedRoot,
  [out] MSFT_HgsKeyProtector cmdletOutput
);

Parameters

KeyProtector [in]

Embedded instance of a MSFT_HgsKeyProtector class that represents the key protector on which to grant access.

Guardian [in]

Embedded instance of a MSFT_HgsGuardian class that represents the guardian to grant access to.

AllowExpired [in]

When specified, allows access to the specified Key Protector for one or more guardians using expired certificates.

AllowUntrustedRoot [in]

When specified, allows access to the specified Key Protector creation with one or more guardians using self-signed certificates.

cmdletOutput [out]

Returns an embedded instance of a MSFT_HgsKeyProtector class with the updated access.

Requirements
Minimum supported client
 Windows 10 [desktop apps only]
Minimum supported server
 Windows Server 2016
Namespace
 Root\Microsoft\Windows\Hgs
MOF
HgsClientWmi.mof
DLL
HgsClientWmi.dll

See also

MSFT_HgsKeyProtector

MSFT_HgsGuardian