Restore-AzKeyVault
Sepenuhnya memulihkan HSM terkelola dari cadangan.
Sintaks
Restore-AzKeyVault
-BackupFolder <String>
[-KeyName <String>]
[-PassThru]
[-HsmName] <String>
-StorageAccountName <String>
-StorageContainerName <String>
[-SasToken <SecureString>]
[-UseUserManagedIdentity]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Restore-AzKeyVault
-BackupFolder <String>
[-KeyName <String>]
[-PassThru]
[-HsmName] <String>
-StorageContainerUri <Uri>
[-SasToken <SecureString>]
[-UseUserManagedIdentity]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Restore-AzKeyVault
-BackupFolder <String>
[-KeyName <String>]
[-PassThru]
-StorageContainerUri <Uri>
[-SasToken <SecureString>]
[-UseUserManagedIdentity]
-HsmObject <PSManagedHsm>
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Restore-AzKeyVault
-BackupFolder <String>
[-KeyName <String>]
[-PassThru]
-StorageAccountName <String>
-StorageContainerName <String>
[-SasToken <SecureString>]
[-UseUserManagedIdentity]
-HsmObject <PSManagedHsm>
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Deskripsi
Sepenuhnya memulihkan HSM terkelola dari cadangan yang disimpan di akun penyimpanan.
Gunakan Backup-AzKeyVault
untuk mencadangkan.
Contoh
Contoh 1 Memulihkan Key Vault
$sasToken = ConvertTo-SecureString -AsPlainText -Force "?sv=2019-12-12&ss=bfqt&srt=sco&sp=rwdlacupx&se=2020-10-12T14:42:19Z&st=2020-10-12T06:42:19Z&spr=https&sig=******"
Restore-AzKeyVault -HsmName myHsm -StorageContainerUri "https://{accountName}.blob.core.windows.net/{containerName}" -BackupFolder "mhsm-myHsm-2020101308504935" -SasToken $sasToken
Contoh memulihkan cadangan yang disimpan dalam folder bernama "mhsm-myHsm-2020101308504935" dari kontainer penyimpanan "https://{accountName}.blob.core.windows.net/{containerName}".
Contoh 2 Memulihkan Key Vault melalui Autentikasi Identitas Terkelola yang Ditetapkan Pengguna
# Make sure an identity is assigend to the Hsm
Update-AzKeyVaultManagedHsm -UserAssignedIdentity "/subscriptions/{sub-id}/resourceGroups/{rg-name}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identity-name}"
Restore-AzKeyVault -HsmName myHsm -StorageContainerUri "https://{accountName}.blob.core.windows.net/{containerName}" -BackupFolder "mhsm-myHsm-2020101308504935" -UseUserManagedIdentity
Contoh memulihkan HSM melalui Autentikasi Identitas Terkelola yang Ditetapkan Pengguna.
Parameter
-BackupFolder
Nama folder cadangan, misalnya 'mhsm--2020101309020403'. Ini juga dapat disarangkan seperti 'cadangan/mhsm--2020101309020403'.
Jenis: | String |
Position: | Named |
nilai default: | None |
Diperlukan: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Confirm
Meminta Anda mengonfirmasi sebelum menjalankan cmdlet.
Jenis: | SwitchParameter |
Aliases: | cf |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DefaultProfile
Kredensial, akun, penyewa, dan langganan yang digunakan untuk komunikasi dengan Azure.
Jenis: | IAzureContextContainer |
Aliases: | AzContext, AzureRmContext, AzureCredential |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-HsmName
Nama HSM.
Jenis: | String |
Position: | 1 |
nilai default: | None |
Diperlukan: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-HsmObject
Objek HSM terkelola
Jenis: | PSManagedHsm |
Position: | Named |
nilai default: | None |
Diperlukan: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-KeyName
Nama kunci untuk dipulihkan.
Jenis: | String |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-PassThru
Mengembalikan true saat HSM dipulihkan.
Jenis: | SwitchParameter |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-SasToken
Token tanda tangan akses bersama (SAS) untuk mengautentikasi akun penyimpanan.
Jenis: | SecureString |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-StorageAccountName
Nama akun penyimpanan tempat cadangan akan disimpan.
Jenis: | String |
Position: | Named |
nilai default: | None |
Diperlukan: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-StorageContainerName
Nama kontainer blob tempat cadangan akan disimpan.
Jenis: | String |
Position: | Named |
nilai default: | None |
Diperlukan: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-StorageContainerUri
URI kontainer penyimpanan tempat cadangan akan disimpan.
Jenis: | Uri |
Position: | Named |
nilai default: | None |
Diperlukan: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-UseUserManagedIdentity
Ditentukan untuk menggunakan Identitas Terkelola Pengguna untuk mengautentikasi akun penyimpanan. Hanya valid ketika SasToken tidak diatur.
Jenis: | SwitchParameter |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-WhatIf
Menunjukkan apa yang akan terjadi jika cmdlet berjalan. Cmdlet tidak dijalankan.
Jenis: | SwitchParameter |
Aliases: | wi |
Position: | Named |
nilai default: | None |
Diperlukan: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Input
None