Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,10 @@ Adds a certificate template to the CA.
### [Backup-CARoleService](./Backup-CARoleService.md)
Backs up the CA database and private key information.

### [Confirm-CAEndorsementKeyInfo](./Confirm-CAEndorsementKeyInfo.md)
### [Confirm-CAAttestationIdentityKeyInfo](Confirm-CAAttestationIdentityKeyInfo.md)
Checks whether the local CA trusts secure hardware for identity key attestation.

### [Confirm-CAEndorsementKeyInfo](Confirm-CAEndorsementKeyInfo.md)
Checks whether the local CA trusts secure hardware for key attestation.

### [Get-CAAuthorityInformationAccess](./Get-CAAuthorityInformationAccess.md)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -180,8 +180,12 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
## INPUTS
### Microsoft.CertificateServices.Administration.Commands.CA.AuthorityInformationAccess
### System.String
### System.Management.Automation.SwitchParameter
## OUTPUTS
### Microsoft.CertificateServices.Administration.Commands.CA.AuthorityInformationAccessResult
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -231,6 +231,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
### System.String
### System.Management.Automation.SwitchParameter
## OUTPUTS
### Microsoft.CertificateServices.Administration.Commands.CA.CrlDistributionPointResult
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -114,7 +114,7 @@ There is only one parameter for this cmdlet, *Name*, and it can only accept a si
## OUTPUTS
### None
### System.Object
## NOTES
* To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -175,8 +175,16 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable

## INPUTS

### System.String

### System.Management.Automation.SwitchParameter

### System.Security.SecureString

## OUTPUTS

### System.Void

## NOTES

## RELATED LINKS
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,115 @@
---
description: Checks whether the local CA trusts secure hardware for identity key attestation.
external help file: Microsoft.CertificateServices.Administration.Commands.dll-Help.xml
Module Name: ADCSAdministration
online version: https://docs.microsoft.com/powershell/module/adcsadministration/confirm-caattestationidentitykeyinfo?view=windowsserver2022-ps&wt.mc_id=ps-gethelp
schema: 2.0.0
title: Confirm-CAAttestationIdentityKeyInfo
---

# Confirm-CAAttestationIdentityKeyInfo

## SYNOPSIS
Checks whether the local CA trusts secure hardware for identity key attestation.

## SYNTAX

### PublicKeyHash
```
Confirm-CAAttestationIdentityKeyInfo [-PublicKeyHash] <String> [<CommonParameters>]
```

### Certificate
```
Confirm-CAAttestationIdentityKeyInfo [-Certificate] <X509Certificate2> [<CommonParameters>]
```

## DESCRIPTION
The **Confirm-CAAttestationIdentityKeyInfo** cmdlet checks whether the local certification authority (CA) trusts secure hardware, such as a Trusted Platform Module (TPM), for identity key attestation. The Attestation Identity Key (AIK) replaces the Endorsement Key as an identity for the TPM. An Attestation Identity Key is permanently embedded in the security hardware. The public portion of the key helps to recognize genuine security hardware.

This cmdlet verifies whether the AIK public certificate connects through a certificate chain to an anchor that the CA trusts. Specify an X509 certificate by using the **Certificate** parameter.

This cmdlet checks whether the AIK public key exists as a file in a folder configured at the local CA for key attestation. Specify the public key by using the **PublicKeyHash** parameter.

## EXAMPLES

### Example 1: Check certificate
```
Confirm-CAAttestationIdentityKeyInfo -Certificate Contoso87.cer
True
```

This command checks whether the certificate `Contoso87.cer` connects, by using a certificate chain, to a trusted anchor.
This example returns a value of `$True`.

### Example 2: Check a key
```
Confirm-CAAttestationIdentityKeyInfo -PublicKeyHash "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
False
```

The command checks for the public certificate specified as an SHA-256 hash code.
This example returns a value of `$False`.
The CA does not have this public key.

## PARAMETERS

### -Certificate
Specifies an X509 public key certificate issued to secure hardware.

```yaml
Type: X509Certificate2
Parameter Sets: Certificate
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False
```
### -PublicKeyHash
Specifies an Attestation Identity Key (AIK) public key of the secure hardware, as the result of the SHA-256 hash algorithm.
This value is a 64 character hexadecimal string.
```yaml
Type: String
Parameter Sets: PublicKeyHash
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False
```
### CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216).
## INPUTS
### System.String
### System.Security.Cryptography.X509Certificates.X509Certificate2
## OUTPUTS
### System.Boolean
## NOTES
## RELATED LINKS
[Confirm-CAEndorsementKeyInfo](Confirm-CAEndorsementKeyInfo.md)
[Add-CAAuthorityInformationAccess](Add-CAAuthorityInformationAccess.md)
[Add-CACrlDistributionPoint](Add-CACrlDistributionPoint.md)
[Backup-CARoleService](Backup-CARoleService.md)
[Confirm-CAEndorsementKeyInfo](Confirm-CAEndorsementKeyInfo.md)
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,9 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
## INPUTS
### System.String, System.Security.Cryptography.X509Certificate2
### System.String
### System.Security.Cryptography.X509Certificates.X509Certificate2
## OUTPUTS
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -153,6 +153,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
### System.String
### System.Management.Automation.SwitchParameter
## OUTPUTS
### Microsoft.CertificateServices.Administration.Commands.CA.AuthorityInformationAccessResult
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -206,6 +206,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
### System.String
### System.Management.Automation.SwitchParameter
## OUTPUTS
### Microsoft.CertificateServices.Administration.Commands.CA.CrlDistributionPointResult
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -135,7 +135,7 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
## OUTPUTS
### None
### System.Object
## NOTES
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -177,8 +177,16 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable

## INPUTS

### System.String

### System.Management.Automation.SwitchParameter

### System.Security.SecureString

## OUTPUTS

### System.Void

## NOTES

## RELATED LINKS
Expand Down
2 changes: 2 additions & 0 deletions docset/winserver2022-ps/startlayout/Export-StartLayout.md
Original file line number Diff line number Diff line change
Expand Up @@ -138,5 +138,7 @@ Export as an .xml file.

## RELATED LINKS

[Export-StartLayoutEdgeAssets](Export-StartLayoutEdgeAssets.md)

[Import-StartLayout](./Import-StartLayout.md)

131 changes: 131 additions & 0 deletions docset/winserver2022-ps/startlayout/Export-StartLayoutEdgeAssets.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,131 @@
---
description: The Export-StartLayoutEdgeAssets cmdlet exports secondary tiles for Microsoft Edge that display a custom image.
external help file: Microsoft.Windows.StartLayout.Commands.dll-Help.xml
Module Name: StartLayout
ms.date: 09/20/2021
online version: https://docs.microsoft.com/powershell/module/startlayout/export-startlayoutedgeassets?view=windowsserver2022-ps&wt.mc_id=ps-gethelp
schema: 2.0.0
---

# Export-StartLayoutEdgeAssets

## SYNOPSIS
Exports secondary tiles for Microsoft Edge that display a custom image.

## SYNTAX

### Non-literal
```
Export-StartLayoutEdgeAssets [-Path] <String> [-WhatIf] [-Confirm] [<CommonParameters>]
```

### Literal
```
Export-StartLayoutEdgeAssets -LiteralPath <String> [-WhatIf] [-Confirm] [<CommonParameters>]
```

## DESCRIPTION
The **Export-StartLayoutEdgeAssets** cmdlet exports secondary tiles for Microsoft Edge that display a custom image.
Use [Export-StartLayout](./Export-StartLayout.md) and [Import-StartLayout](./Import-StartLayout.md) along with the current cmdlet to import the assets.
For more information, see [Add image for secondary Microsoft Edge tiles](/windows/configuration/start-secondary-tiles).

The provisioning policies that use the exported assets are no longer used with the Windows 11 Start menu.

## EXAMPLES

### Example 1: Export assets
```powershell
Export-StartLayoutEdgeAssets -Path "C:\Layouts\assets.xml"
```

This example exports the assets to the file `assets.xml` in the `C:\Layouts` folder.
This cmdlet doesn't append `.xml` to a file name.

## PARAMETERS

### -LiteralPath
Specifies a literal path for an asset file.
Include the `.xml` file name extension.
This parameter does not accept the wildcard character (*).
If the path includes an escape character (\\), enclose the string in single quotes (').

```yaml
Type: String
Parameter Sets: Literal
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -Path
Specifies an absolute path for an asset file.
Include the `.xml` file name extension.
This parameter does not accept the wildcard character (*).

```yaml
Type: String
Parameter Sets: Non-literal
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -Confirm
Prompts you for confirmation before running the cmdlet.

```yaml
Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -WhatIf
Shows what would happen if the cmdlet runs.
The cmdlet is not run.

```yaml
Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216).

## INPUTS

### None

## OUTPUTS

### System.Object

## NOTES

## RELATED LINKS

[Export-StartLayout](./Export-StartLayout.md)

[Get-StartApps](Get-StartApps.md)

[Import-StartLayout](./Import-StartLayout.md)
5 changes: 4 additions & 1 deletion docset/winserver2022-ps/startlayout/StartLayout.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,10 @@ This reference provides cmdlet descriptions and syntax for all Start screen cmdl
### [Export-StartLayout](./Export-StartLayout.md)
Exports the layout of the Start screen.

### [Get-StartApps](./Get-StartApps.md)
### [Export-StartLayoutEdgeAssets](Export-StartLayoutEdgeAssets.md)
Exports secondary tiles for Microsoft Edge that display a custom image.

### [Get-StartApps](Get-StartApps.md)
Gets the names and AppIDs of installed apps.

### [Import-StartLayout](./Import-StartLayout.md)
Expand Down