Modifier

Partager via


Add-HgsAttestationHostGroup

Adds an attestation policy for an Active Directory host group configuration.

Syntax

Add-HgsAttestationHostGroup
   -Name <String>
   -HostGroup <String>
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]
Add-HgsAttestationHostGroup
   -Name <String>
   -Identifier <String>
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The Add-HgsAttestationHostGroup cmdlet adds an Attestation policy that is based on the configuration of an Active Directory host group. Specify a host group by name or security identifier (SID).

Examples

Example 1: Add a host group

PS C:\> Add-HgsAttestationHostGroup -Name "TrustedADHostGroup14" -Identifier $Sid

This command adds a host group from the Active Directory fabric to the Attestation service. The Identifier parameter specifies an SID stored in $Sid. After you run this command, the Attestation service trusts all hosts that belong to this host group to host shielded virtual machines.

Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-HostGroup

Specifies the name of a host group on which this cmdlet bases the policy. Include the domain.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Identifier

Specifies the SID of a host group on which this cmdlet bases the policy.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Name

Specifies the friendly name of the host group.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False