diff --git a/docset/winserver2022-ps/adcsadministration/ADCSAdministration.md b/docset/winserver2022-ps/adcsadministration/ADCSAdministration.md index 377be8ec01..4722a6e3c2 100644 --- a/docset/winserver2022-ps/adcsadministration/ADCSAdministration.md +++ b/docset/winserver2022-ps/adcsadministration/ADCSAdministration.md @@ -26,7 +26,10 @@ Adds a certificate template to the CA. ### [Backup-CARoleService](./Backup-CARoleService.md) Backs up the CA database and private key information. -### [Confirm-CAEndorsementKeyInfo](./Confirm-CAEndorsementKeyInfo.md) +### [Confirm-CAAttestationIdentityKeyInfo](Confirm-CAAttestationIdentityKeyInfo.md) +Checks whether the local CA trusts secure hardware for identity key attestation. + +### [Confirm-CAEndorsementKeyInfo](Confirm-CAEndorsementKeyInfo.md) Checks whether the local CA trusts secure hardware for key attestation. ### [Get-CAAuthorityInformationAccess](./Get-CAAuthorityInformationAccess.md) diff --git a/docset/winserver2022-ps/adcsadministration/Add-CAAuthorityInformationAccess.md b/docset/winserver2022-ps/adcsadministration/Add-CAAuthorityInformationAccess.md index a58068fe31..4af9633bdb 100644 --- a/docset/winserver2022-ps/adcsadministration/Add-CAAuthorityInformationAccess.md +++ b/docset/winserver2022-ps/adcsadministration/Add-CAAuthorityInformationAccess.md @@ -180,8 +180,12 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ## INPUTS +### Microsoft.CertificateServices.Administration.Commands.CA.AuthorityInformationAccess + ### System.String +### System.Management.Automation.SwitchParameter + ## OUTPUTS ### Microsoft.CertificateServices.Administration.Commands.CA.AuthorityInformationAccessResult diff --git a/docset/winserver2022-ps/adcsadministration/Add-CACrlDistributionPoint.md b/docset/winserver2022-ps/adcsadministration/Add-CACrlDistributionPoint.md index 39614a5a27..886dc57d00 100644 --- a/docset/winserver2022-ps/adcsadministration/Add-CACrlDistributionPoint.md +++ b/docset/winserver2022-ps/adcsadministration/Add-CACrlDistributionPoint.md @@ -231,6 +231,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ### System.String +### System.Management.Automation.SwitchParameter + ## OUTPUTS ### Microsoft.CertificateServices.Administration.Commands.CA.CrlDistributionPointResult diff --git a/docset/winserver2022-ps/adcsadministration/Add-CATemplate.md b/docset/winserver2022-ps/adcsadministration/Add-CATemplate.md index 55c1663e68..e92f52284a 100644 --- a/docset/winserver2022-ps/adcsadministration/Add-CATemplate.md +++ b/docset/winserver2022-ps/adcsadministration/Add-CATemplate.md @@ -114,7 +114,7 @@ There is only one parameter for this cmdlet, *Name*, and it can only accept a si ## OUTPUTS -### None +### System.Object ## NOTES * To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. diff --git a/docset/winserver2022-ps/adcsadministration/Backup-CARoleService.md b/docset/winserver2022-ps/adcsadministration/Backup-CARoleService.md index 95c2720521..44f15001d7 100644 --- a/docset/winserver2022-ps/adcsadministration/Backup-CARoleService.md +++ b/docset/winserver2022-ps/adcsadministration/Backup-CARoleService.md @@ -175,8 +175,16 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ## INPUTS +### System.String + +### System.Management.Automation.SwitchParameter + +### System.Security.SecureString + ## OUTPUTS +### System.Void + ## NOTES ## RELATED LINKS diff --git a/docset/winserver2022-ps/adcsadministration/Confirm-CAAttestationIdentityKeyInfo.md b/docset/winserver2022-ps/adcsadministration/Confirm-CAAttestationIdentityKeyInfo.md new file mode 100644 index 0000000000..01981a0c9c --- /dev/null +++ b/docset/winserver2022-ps/adcsadministration/Confirm-CAAttestationIdentityKeyInfo.md @@ -0,0 +1,115 @@ +--- +description: Checks whether the local CA trusts secure hardware for identity key attestation. +external help file: Microsoft.CertificateServices.Administration.Commands.dll-Help.xml +Module Name: ADCSAdministration +online version: https://docs.microsoft.com/powershell/module/adcsadministration/confirm-caattestationidentitykeyinfo?view=windowsserver2022-ps&wt.mc_id=ps-gethelp +schema: 2.0.0 +title: Confirm-CAAttestationIdentityKeyInfo +--- + +# Confirm-CAAttestationIdentityKeyInfo + +## SYNOPSIS +Checks whether the local CA trusts secure hardware for identity key attestation. + +## SYNTAX + +### PublicKeyHash +``` +Confirm-CAAttestationIdentityKeyInfo [-PublicKeyHash] [] +``` + +### Certificate +``` +Confirm-CAAttestationIdentityKeyInfo [-Certificate] [] +``` + +## DESCRIPTION +The **Confirm-CAAttestationIdentityKeyInfo** cmdlet checks whether the local certification authority (CA) trusts secure hardware, such as a Trusted Platform Module (TPM), for identity key attestation. The Attestation Identity Key (AIK) replaces the Endorsement Key as an identity for the TPM. An Attestation Identity Key is permanently embedded in the security hardware. The public portion of the key helps to recognize genuine security hardware. + +This cmdlet verifies whether the AIK public certificate connects through a certificate chain to an anchor that the CA trusts. Specify an X509 certificate by using the **Certificate** parameter. + +This cmdlet checks whether the AIK public key exists as a file in a folder configured at the local CA for key attestation. Specify the public key by using the **PublicKeyHash** parameter. + +## EXAMPLES + +### Example 1: Check certificate +``` +Confirm-CAAttestationIdentityKeyInfo -Certificate Contoso87.cer + +True +``` + +This command checks whether the certificate `Contoso87.cer` connects, by using a certificate chain, to a trusted anchor. +This example returns a value of `$True`. + +### Example 2: Check a key +``` +Confirm-CAAttestationIdentityKeyInfo -PublicKeyHash "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef" + +False +``` + +The command checks for the public certificate specified as an SHA-256 hash code. +This example returns a value of `$False`. +The CA does not have this public key. + +## PARAMETERS + +### -Certificate +Specifies an X509 public key certificate issued to secure hardware. + +```yaml +Type: X509Certificate2 +Parameter Sets: Certificate +Aliases: + +Required: True +Position: 1 +Default value: None +Accept pipeline input: True (ByPropertyName, ByValue) +Accept wildcard characters: False +``` + +### -PublicKeyHash +Specifies an Attestation Identity Key (AIK) public key of the secure hardware, as the result of the SHA-256 hash algorithm. +This value is a 64 character hexadecimal string. + +```yaml +Type: String +Parameter Sets: PublicKeyHash +Aliases: + +Required: True +Position: 1 +Default value: None +Accept pipeline input: True (ByPropertyName, ByValue) +Accept wildcard characters: False +``` + +### CommonParameters +This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216). + +## INPUTS + +### System.String + +### System.Security.Cryptography.X509Certificates.X509Certificate2 + +## OUTPUTS + +### System.Boolean + +## NOTES + +## RELATED LINKS + +[Confirm-CAEndorsementKeyInfo](Confirm-CAEndorsementKeyInfo.md) + +[Add-CAAuthorityInformationAccess](Add-CAAuthorityInformationAccess.md) + +[Add-CACrlDistributionPoint](Add-CACrlDistributionPoint.md) + +[Backup-CARoleService](Backup-CARoleService.md) + +[Confirm-CAEndorsementKeyInfo](Confirm-CAEndorsementKeyInfo.md) diff --git a/docset/winserver2022-ps/adcsadministration/Confirm-CAEndorsementKeyInfo.md b/docset/winserver2022-ps/adcsadministration/Confirm-CAEndorsementKeyInfo.md index c5a987d29e..4297d48c2a 100644 --- a/docset/winserver2022-ps/adcsadministration/Confirm-CAEndorsementKeyInfo.md +++ b/docset/winserver2022-ps/adcsadministration/Confirm-CAEndorsementKeyInfo.md @@ -97,7 +97,9 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ## INPUTS -### System.String, System.Security.Cryptography.X509Certificate2 +### System.String + +### System.Security.Cryptography.X509Certificates.X509Certificate2 ## OUTPUTS diff --git a/docset/winserver2022-ps/adcsadministration/Remove-CAAuthorityInformationAccess.md b/docset/winserver2022-ps/adcsadministration/Remove-CAAuthorityInformationAccess.md index aafa625725..d33f3de742 100644 --- a/docset/winserver2022-ps/adcsadministration/Remove-CAAuthorityInformationAccess.md +++ b/docset/winserver2022-ps/adcsadministration/Remove-CAAuthorityInformationAccess.md @@ -153,6 +153,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ### System.String +### System.Management.Automation.SwitchParameter + ## OUTPUTS ### Microsoft.CertificateServices.Administration.Commands.CA.AuthorityInformationAccessResult diff --git a/docset/winserver2022-ps/adcsadministration/Remove-CACrlDistributionPoint.md b/docset/winserver2022-ps/adcsadministration/Remove-CACrlDistributionPoint.md index 0b51a32a6b..3a469f8fb2 100644 --- a/docset/winserver2022-ps/adcsadministration/Remove-CACrlDistributionPoint.md +++ b/docset/winserver2022-ps/adcsadministration/Remove-CACrlDistributionPoint.md @@ -206,6 +206,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ### System.String +### System.Management.Automation.SwitchParameter + ## OUTPUTS ### Microsoft.CertificateServices.Administration.Commands.CA.CrlDistributionPointResult diff --git a/docset/winserver2022-ps/adcsadministration/Remove-CATemplate.md b/docset/winserver2022-ps/adcsadministration/Remove-CATemplate.md index 0dd2fc4bb1..82c3bf9392 100644 --- a/docset/winserver2022-ps/adcsadministration/Remove-CATemplate.md +++ b/docset/winserver2022-ps/adcsadministration/Remove-CATemplate.md @@ -135,7 +135,7 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ## OUTPUTS -### None +### System.Object ## NOTES diff --git a/docset/winserver2022-ps/adcsadministration/Restore-CARoleService.md b/docset/winserver2022-ps/adcsadministration/Restore-CARoleService.md index 9ad94000f0..67c9ceaccd 100644 --- a/docset/winserver2022-ps/adcsadministration/Restore-CARoleService.md +++ b/docset/winserver2022-ps/adcsadministration/Restore-CARoleService.md @@ -177,8 +177,16 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable ## INPUTS +### System.String + +### System.Management.Automation.SwitchParameter + +### System.Security.SecureString + ## OUTPUTS +### System.Void + ## NOTES ## RELATED LINKS