Set-DHASActiveEncryptionCertificate

Sets the active encryption certificate.

Syntax

Set-DHASActiveEncryptionCertificate
   [-Thumbprint] <String>
   [-Force]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The Set-DHASActiveEncryptionCertificate cmdlet sets the active encryption certificate for the Device Health Attestation service.

You must have administrator rights to run this cmdlet.

Examples

Example 1: Set the encryption certificate

PS C:\> Set-DHASActiveEncryptionCertificate -Thumbprint "0123456789ABCDEF0123456789ABCDEF01234567"

This command sets the active encryption certificate for the Device Health Attestation service.

Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Thumbprint

Specifies the encryption certificate thumbprint. The value must contain only hexadecimal digits (0-9, A-F) and be 40 characters in length. This value is case-insensitive.

Type:String
Position:0
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

String

The input type is a String for the active encryption certificate thumbprint.