Initialize the Host Guardian Service (HGS)

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016

When you initialize HGS, you specify the mode that HGS will use to measure the health of guarded hosts. There are two mutually exclusive options. For background information about which mode to choose, see Guarded Fabric and Shielded VM Planning Guide for Hosters.

The following topics cover deployment steps for each mode:

• TPM-trusted attestation (TPM mode)
• Host key attestation (Key mode)
• Admin-trusted attestation (AD mode)

You should perform these steps on a physical server.