AttestationAdministrationClient.ResetPolicy Method

Definition

Resets the policy for the specified AttestationType to the default value.

public virtual Azure.Security.Attestation.AttestationResponse<Azure.Security.Attestation.PolicyModificationResult> ResetPolicy (Azure.Security.Attestation.AttestationType attestationType, Azure.Security.Attestation.AttestationTokenSigningKey signingKey = default, System.Threading.CancellationToken cancellationToken = default);
abstract member ResetPolicy : Azure.Security.Attestation.AttestationType * Azure.Security.Attestation.AttestationTokenSigningKey * System.Threading.CancellationToken -> Azure.Security.Attestation.AttestationResponse<Azure.Security.Attestation.PolicyModificationResult>
override this.ResetPolicy : Azure.Security.Attestation.AttestationType * Azure.Security.Attestation.AttestationTokenSigningKey * System.Threading.CancellationToken -> Azure.Security.Attestation.AttestationResponse<Azure.Security.Attestation.PolicyModificationResult>
Public Overridable Function ResetPolicy (attestationType As AttestationType, Optional signingKey As AttestationTokenSigningKey = Nothing, Optional cancellationToken As CancellationToken = Nothing) As AttestationResponse(Of PolicyModificationResult)

Parameters

attestationType
AttestationType

AttestationType whose policy should be reset.

signingKey
AttestationTokenSigningKey

If provided, specifies the signing key and certificate used to sign the request to the attestation service.

cancellationToken
CancellationToken

Cancellation token used to cancel this operation.

Returns

An AttestationResponse<T> with the policy for the specified attestation type.

Remarks

If the signingKey parameter is not provided, then the policy document sent to the attestation service will be unsigned. Unsigned attestation policies are only allowed when the attestation instance is running in AAD mode - if the attestation instance is running in Isolated mode, then a signing key and signing certificate MUST be provided to ensure that the caller of the API is authorized to change policy. The Certificate fieldMUST be one of the certificates returned by the GetPolicyManagementCertificates(CancellationToken) API.

Applies to