Set-CMCertificateProfileScep

  • Artikel

SYNOPSIS

Anger en SCEP-certifikatprofil.

SYNTAX

ByValue (standard)

Set-CMCertificateProfileScep [-AllowCertificateOnAnyDevice <Boolean>]
 [-CertificateStore <CertificateStoreType>] [-CertificateTemplateName <String>]
 [-CertificateValidityDays <Int32>] [-Description <String>] [-Eku <Hashtable>]
 [-EnrollmentRenewThresholdPct <Int32>] [-EnrollmentRetryCount <Int32>] [-EnrollmentRetryDelayMins <Int32>]
 [-HashAlgorithm <HashAlgorithmTypes>] -InputObject <IResultObject> [-KeySize <Int32>]
 [-KeyStorageProvider <KeyStorageProviderSettingType>] [-KeyUsage <X509KeyUsageFlags>] [-NewName <String>]
 [-PassThru] [-RequireMultifactor <Boolean>] [-RootCertificate <IResultObject>]
 [-SanType <SubjectAlternativeNameFormatTypes>] [-ScepServerUrl <String[]>]
 [-SubjectType <SubjectNameFormatTypes>] [-SupportedPlatform <IResultObject[]>] [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]

ById

Set-CMCertificateProfileScep [-AllowCertificateOnAnyDevice <Boolean>]
 [-CertificateStore <CertificateStoreType>] [-CertificateTemplateName <String>]
 [-CertificateValidityDays <Int32>] [-Description <String>] [-Eku <Hashtable>]
 [-EnrollmentRenewThresholdPct <Int32>] [-EnrollmentRetryCount <Int32>] [-EnrollmentRetryDelayMins <Int32>]
 [-HashAlgorithm <HashAlgorithmTypes>] -Id <Int32> [-KeySize <Int32>]
 [-KeyStorageProvider <KeyStorageProviderSettingType>] [-KeyUsage <X509KeyUsageFlags>] [-NewName <String>]
 [-PassThru] [-RequireMultifactor <Boolean>] [-RootCertificate <IResultObject>]
 [-SanType <SubjectAlternativeNameFormatTypes>] [-ScepServerUrl <String[]>]
 [-SubjectType <SubjectNameFormatTypes>] [-SupportedPlatform <IResultObject[]>] [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]

ByName

Set-CMCertificateProfileScep [-AllowCertificateOnAnyDevice <Boolean>]
 [-CertificateStore <CertificateStoreType>] [-CertificateTemplateName <String>]
 [-CertificateValidityDays <Int32>] [-Description <String>] [-Eku <Hashtable>]
 [-EnrollmentRenewThresholdPct <Int32>] [-EnrollmentRetryCount <Int32>] [-EnrollmentRetryDelayMins <Int32>]
 [-HashAlgorithm <HashAlgorithmTypes>] [-KeySize <Int32>] [-KeyStorageProvider <KeyStorageProviderSettingType>]
 [-KeyUsage <X509KeyUsageFlags>] -Name <String> [-NewName <String>] [-PassThru] [-RequireMultifactor <Boolean>]
 [-RootCertificate <IResultObject>] [-SanType <SubjectAlternativeNameFormatTypes>] [-ScepServerUrl <String[]>]
 [-SubjectType <SubjectNameFormatTypes>] [-SupportedPlatform <IResultObject[]>] [-DisableWildcardHandling]
 [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]

DESCRIPTION

Cmdleten Set-CMCertificateProfileScep uppdaterar inställningarna för en SCEP-certifikatprofil.

Anteckning

Kör Konfigurationshanteraren cmdlets från Konfigurationshanteraren platsenheten, till exempel PS XYZ:\> . Mer information finns i Komma igång.

EXAMPLES

Exempel 1: Ange en SCEP-certifikatprofil efter namn

PS XYZ:\> Set-CMCertificateProfileScep -Name "TestProfile01" -CertificateStore Machine -Description "Test update" -HashAlgorithm SHA3 -KeySize 1024 -KeyUsage KeyEncipherment -NewName "TestProfile01_updated" -SanType SubjectAltRequireDns

Det här kommandot uppdaterar SEP-certifikatprofilen med namnet TestProfile01 och ger den det nya namnet TestProfile01_updated.

Exempel 2: Ange en SCEP-certifikatprofil med hjälp av pipelinen

PS XYZ:\> Get-CMCertificateProfileScep -Name "TestProfile02" -Fast | Set-CMCertificateProfileScep -AllowCertificateOnAnyDevice $True -KeyStorageProvider InstallToNGC_FailIfNotPresent

Det här kommandot hämtar SEP-certifikatprofilobjektet med namnet TestProfile02 och använder pipelineoperatorn för att skicka objektet till Set-CMCertificateProfileScep, som uppdaterar inställningarna för profilobjektet.

PARAMETERS

-AllowCertificateOnAnyDevice

Anger om certifikatregistrering ska tillåtas på en enhet.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-CertificateStore

Anger certifikattypen. Giltiga värden är:

  • Dator
  • Användare
Type: CertificateStoreType
Parameter Sets: (All)
Aliases:
Accepted values: Machine, User

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-CertificateTemplateName

Anger namnet på en certifikatmall.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-CertificateValidityDays

Anger giltighetsperioden för certifikatet i antal dagar.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Confirm

Uppmanar dig att bekräfta innan du kör cmdleten.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-Beskrivning

Anger en beskrivning för SCEP-certifikatprofilen.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-DisableWildcardHandling

Den här parametern behandlar jokertecken som värden för literaltecken. Du kan inte kombinera den med ForceWildcardHandling.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Eku

Anger den utökade nyckelanvändningen. Värdena i hash-tabellen definierar certifikatets avsedda syfte.

Type: Hashtable
Parameter Sets: (All)
Aliases: Ekus

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-EnrollmentRenewThresholdPct

Anger den procentandel av certifikatets livslängd som återstår innan enhetsbegäranden förnyar certifikatet.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-EnrollmentRetryCount

Anger hur många gånger enheten automatiskt försöker skicka certifikatbegäran till den server som kör registreringstjänst för nätverksenheter.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-EnrollmentRetryDelayMins

Anger intervallet, i minuter, mellan varje registreringsförsök när du använder CA Manager-godkännande innan den utfärdande certifikatutfärdaren bearbetar certifikatbegäran.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ForceWildcardHandling

Den här parametern bearbetar jokertecken och kan leda till oväntat beteende (rekommenderas inte). Du kan inte kombinera den med DisableWildcardHandling.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-HashAlgorithm

Anger hash-algoritmen. Giltiga värden är:

  • SHA1
  • SHA2
  • SHA3
  • Ingen
Type: HashAlgorithmTypes
Parameter Sets: (All)
Aliases: HashAlgorithms
Accepted values: NONE, SHA1, SHA2, SHA3

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Id

Anger CI_ID en SCEP-certifikatprofil.

Type: Int32
Parameter Sets: ById
Aliases: CI_ID, CIId

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InputObject

Anger ett SCEP-certifikatprofilobjekt. Om du vill hämta ett SCEP-certifikatprofilobjekt använder Get-CMCertificateProfileScep-funktionen.

Type: IResultObject
Parameter Sets: ByValue
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-KeySize

Anger nyckelns storlek. Giltiga värden är:

  • 1024
  • 2048
Type: Int32
Parameter Sets: (All)
Aliases:
Accepted values: 1024, 2048, 4096

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-KeyStorageProvider

Anger nyckel-Storage providern (KSP) för SCEP-registreringen. Giltiga värden är:

  • Ingen
  • InstallToTPM_FailIfNotPresent
  • InstallToTPM_IfPresent
  • InstallToSoftwareKeyStorageProvider
  • InstallToNGC_FailIfNotPresent
Type: KeyStorageProviderSettingType
Parameter Sets: (All)
Aliases:
Accepted values: None, InstallToTPM_FailIfNotPresent, InstallToTPM_IfPresent, InstallToSoftwareKeyStorageProvider, InstallToNGC_FailIfNotPresent

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-KeyUsage

Anger nyckelanvändningen för certifikatet. Giltiga värden är:

  • KeyEncipherment
  • DigitalSignature
  • Ingen
  • EncipherOnly
  • CrlSign
  • KeyCertSign
  • KeyAgreement
  • DataEncipherment
  • Oavvislighet
  • DecipherOnly
Type: X509KeyUsageFlags
Parameter Sets: (All)
Aliases: KeyUsages
Accepted values: KeyEncipherment, DigitalSignature

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Name

Anger ett namn för SCEP-certifikatprofilen.

Type: String
Parameter Sets: ByName
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-NewName

Anger ett nytt namn för SCEP-certifikatprofilen.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-PassThru

Lägg till den här parametern för att returnera ett objekt som representerar det objekt som du arbetar med. Som standard genererar den här cmdleten kanske inte några utdata.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RequireMultifactor

Anger att multifaktorautentisering krävs vid registrering av enheter innan certifikat utfärdas till dessa enheter. Den här parametern kan användas när InstallToNGC_FailIfNotPresent har angetts för parametern KeyStorageProvider.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RootCertificate

Anger ett certifikatobjekt för betrodd rotcertifikatutfärdare. Om du vill hämta ett betrott rotcertifikatutfärdarcertifikat använder Get-CMCertificateProfileTrustedRootCA-funktionen.

Type: IResultObject
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SanType

Anger alternativt ämnesnamn. Giltiga värden är:

  • SubjectAltRequireSpn
  • SubjectAltRequireUpn
  • SubjectAltReqiureEmail
  • SubjectAltRequireDns
Type: SubjectAlternativeNameFormatTypes
Parameter Sets: (All)
Aliases: SanTypes
Accepted values: SubjectAltRequireCustom, SubjectAltRequireSpn, SubjectAltRequireAAD, SubjectAltRequireUpn, SubjectAltReqiureEmail, SubjectAltRequireDns

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ScepServerUrl

Anger en matris med URL:er för registreringstjänst för nätverksenheter (NDES)-servrar som ska utfärda certifikat via SCEP.

Type: String[]
Parameter Sets: (All)
Aliases: ScepServerUrls

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SubjectType

Anger ämnesnamnets format. Giltiga värden är:

  • SubjectRequireCommonNameAsEmail
  • SubjectRequireCommonNameAsDeviceName
  • SubjectRequireCommonNameAsOSName
  • SubjectRequireCommonNameAsIMEI
  • SubjectRequireCommonNameAsMEID
  • SubjectRequireCommonNameAsSerialNumber
  • SubjectRequireCommonNameAsDeviceType
  • SubjectRequireCommonNameAsWiFiMAC
  • SubjectRequireCommonNameAsEthernetMAC
  • SubjectRequireAsCustomString
  • SubjectRequireDnsAsCN
  • SubjectRequireEmail
  • SubjectRequireCommonName
  • SubjectRequireDirectoryPath
Type: SubjectNameFormatTypes
Parameter Sets: (All)
Aliases: SubjectTypes
Accepted values: SubjectRequireCommonNameAsEmail, SubjectRequireCommonNameAsDeviceName, SubjectRequireCommonNameAsOSName, SubjectRequireCommonNameAsIMEI, SubjectRequireCommonNameAsMEID, SubjectRequireCommonNameAsSerialNumber, SubjectRequireCommonNameAsDeviceType, SubjectRequireCommonNameAsWiFiMAC, SubjectRequireCommonNameAsEthernetMAC, SubjectRequireAsCustomString, SubjectRequireDnsAsCN, SubjectRequireEmail, SubjectRequireCommonName, SubjectRequireDirectoryPath

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SupportedPlatform

Anger ett plattformsobjekt som stöds. Om du vill hämta ett plattformsobjekt som stöds använder du Get-CMSupportedPlatform cmdlet.

Type: IResultObject[]
Parameter Sets: (All)
Aliases: SupportedPlatforms

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WhatIf

Visar vad som skulle hända om cmdleten kördes. Cmdleten körs inte.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

Denna cmdlet har stöd för parametrarna -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction och -WarningVariable. Mer information finns i about_CommonParameters.

INPUTS

Microsoft.ConfigurationManagement.ManagementProvider.IResultObject

OUTPUTS

IResultObject#SMS_ConfigurationPolicy

ANTECKNINGAR

Get-CMCertificateProfileScep

Get-CMCertificateProfileTrustedRootCA

Get-CMSupportedPlatform

New-CMCertificateProfileScep