Get-RmsChildCert

Get-RmsChildCert

Returns all child certificates from a parent certificate used in a user request for the Active Directory Rights Management Services (AD RMS) cluster.

구문

Parameter Set: Default
Get-RmsChildCert [-Path] <String[]> -ParentCertId <String> -ParentCertType <String> [-EndTime <DateTime> ] [-StartTime <DateTime> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

자세한 설명

This cmdlet returns all issuance licenses from a parent client licensor certificate (CLC) or all end-user licenses (EULs) from a parent issuance license used in a user request on the Active Directory Rights Management Services (AD RMS) cluster.

To obtain licenses, specify the ParentCertID and ParentCertType of the parent certificate for which you want to retrieve child certificates and then set the Path parameter to the AD RMS provider drive subpath “<PSDrive>:\Report” where <PSDrive> is the provider drive ID. You can also specify a relative path. For example, “.” specifies the current location.

Use the Get-RmsCertChain cmdlet to obtain the ParentCertID and the ParentCertType of the certificate for which you to retrieve child certificates. The ParentCertID value returned is valid only for the cluster identified by the Path parameter of Get-RmsCertChain. You cannot use a ParentCertID to identify the same certificate in different clusters.

매개 변수

-EndTime<DateTime>

Specifies the end of a time period for a system health report. This parameter specifies a time value. See the description of the StartTime parameter for information on specifying a time.

-ParentCertId<String>

Specifies the parent certificate for which child certificates are to be returned.

-ParentCertType<String>

Specifies the type of parent certificate for which child certificates are to be returned. Possible values for this parameter are Client-Licensor-Certificate (or CLC) or Issuance-License (or IL).

-Path<String[]>

Specifies a provider drive and path or relative path on the current drive. This parameter is required. Use a dot (.) to specify the current location. This parameter does not accept wildcards and has no default value.

-StartTime<DateTime>

Specifies the beginning of a time period. This parameter specifies a time value.

The following examples show commonly-used syntax to specify a time. Time is assumed to be local time unless otherwise specified. When a time value is not specified, the time is assumed to 12:00:00 AM local time. When a date is not specified, the date is assumed to be the current date.

- “4/17/2006”

- “Monday, April 17, 2006”

- “2:22:45 PM”

- “Monday, April 17, 2006 2:22:45 PM”

These examples specify the same date and the time without the seconds.

- "4/17/2006 2:22 PM”

- "Monday, April 17, 2006 2:22 PM"

- "2:22 PM”

The following example shows how to specify a date and time by using the RFC1123 standard. This example defines time by using Greenwich Mean Time (GMT).

-"Mon, 17 Apr 2006 21:22:48 GMT”

The following example shows how to specify a round-trip value as Coordinated Universal Time (UTC). This example represents Monday, April 17, 2006 at 2:22:48 PM UTC.

-"2000-04-17T14:22:48.0000000"

-Confirm

cmdlet을 실행하기 전에 확인 메시지가 표시됩니다.

-WhatIf

cmdlet이 실행될 경우 결과 동작을 표시합니다. cmdlet이 실행되지 않습니다.

<CommonParameters>

이 cmdlet은 일반 매개 변수 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer 및 -OutVariable을 지원합니다. 자세한 내용은 다음을 참조하세요. about_CommonParameters(https://go.microsoft.com/fwlink/p/?LinkID=113216).

입력

입력 유형은 cmdlet에 파이프할 수 있는 개체의 유형입니다.

출력

출력 유형은 cmdlet이 내보내는 개체의 유형입니다.

예제

-------------- EXAMPLE 1 --------------

This command returns all child certificates from a parent client licensor certificate.

C:\PS>Get-RmsChildCert -Path . -parentCertId 8AGI9GoWuobJDsTmr/CUHTCEpsI= -ParentCertType CLC

-------------- EXAMPLE 2 --------------

This command stores a certificate obtained from the Get-RmsCertChain cmdlet in a variable and then uses that variable to pass the certificate ID and type to the Get-RmsChildCert cmdlet to return child certificates.

C:\PS>$parentCert = Get-RmsCertChain -Path . -RequestID 3 | Where {$_.CertificateType -eq 'Client-Licensor-Certificate'}
Get-RmsChildCert -Path . -ParentCertId $parentCert.CertificateID -ParentCertType $parentCert.CertificateType

관련 항목

Get-RmsCertChain

Get-RmsCertInfo

Get-RmsUserRequestReport

Using Windows PowerShell with AD RMS