Remove-DHASInactiveSigningCertificate

Removes the inactive signing certificate.

Syntax

Remove-DHASInactiveSigningCertificate
      [[-Thumbprint] <String>]
      [-Force]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Description

The Remove-DHASInactiveSigningCertificate cmdlet removes the inactive signing certificate for the Device Health Attestation service.

You must have administrator rights to run this cmdlet.

Examples

Example 1: Remove the signing certificate

PS C:\> Remove-DHASInactiveSigningCertificate -Thumbprint "0123456789ABCDEF0123456789ABCDEF01234567"

This command removes the specified inactive signing certificate.

Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Thumbprint

Specifies the signing certificate thumbprint. The value must contain only hexadecimal digits (0-9, A-F) and be 40 characters in length. This value is case-insensitive.

Type:String
Position:0
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False