你当前正在访问 Microsoft Azure Global Edition 技术文档网站。如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Restore-AzKeyVault

参考

模块:: Az.KeyVault

完全从备份还原托管 HSM。

语法

Restore-AzKeyVault
       -BackupFolder <String>
       [-KeyName <String>]
       [-PassThru]
       [-HsmName] <String>
       -StorageAccountName <String>
       -StorageContainerName <String>
       [-SasToken <SecureString>]
       [-UseUserManagedIdentity]
       [-DefaultProfile <IAzureContextContainer>]
       [-WhatIf]
       [-Confirm]
       [<CommonParameters>]

Restore-AzKeyVault
       -BackupFolder <String>
       [-KeyName <String>]
       [-PassThru]
       [-HsmName] <String>
       -StorageContainerUri <Uri>
       [-SasToken <SecureString>]
       [-UseUserManagedIdentity]
       [-DefaultProfile <IAzureContextContainer>]
       [-WhatIf]
       [-Confirm]
       [<CommonParameters>]

Restore-AzKeyVault
       -BackupFolder <String>
       [-KeyName <String>]
       [-PassThru]
       -StorageContainerUri <Uri>
       [-SasToken <SecureString>]
       [-UseUserManagedIdentity]
       -HsmObject <PSManagedHsm>
       [-DefaultProfile <IAzureContextContainer>]
       [-WhatIf]
       [-Confirm]
       [<CommonParameters>]

Restore-AzKeyVault
       -BackupFolder <String>
       [-KeyName <String>]
       [-PassThru]
       -StorageAccountName <String>
       -StorageContainerName <String>
       [-SasToken <SecureString>]
       [-UseUserManagedIdentity]
       -HsmObject <PSManagedHsm>
       [-DefaultProfile <IAzureContextContainer>]
       [-WhatIf]
       [-Confirm]
       [<CommonParameters>]

说明

完全从存储在存储帐户中的备份还原托管 HSM。用于 Backup-AzKeyVault 备份。

示例

示例 1 还原密钥库

$sasToken = ConvertTo-SecureString -AsPlainText -Force "?sv=2019-12-12&ss=bfqt&srt=sco&sp=rwdlacupx&se=2020-10-12T14:42:19Z&st=2020-10-12T06:42:19Z&spr=https&sig=******"
Restore-AzKeyVault -HsmName myHsm -StorageContainerUri "https://{accountName}.blob.core.windows.net/{containerName}" -BackupFolder "mhsm-myHsm-2020101308504935" -SasToken $sasToken

该示例还原存储在存储容器“https://{accountName}.blob.core.windows.net/{containerName}”的名为“mhsm-myHsm-2020101308504935”的文件夹中的备份。

示例 2 通过用户分配的托管标识身份验证还原密钥库

# Make sure an identity is assigend to the Hsm
Update-AzKeyVaultManagedHsm -UserAssignedIdentity "/subscriptions/{sub-id}/resourceGroups/{rg-name}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identity-name}"
Restore-AzKeyVault -HsmName myHsm -StorageContainerUri "https://{accountName}.blob.core.windows.net/{containerName}" -BackupFolder "mhsm-myHsm-2020101308504935" -UseUserManagedIdentity

该示例通过用户分配的托管标识身份验证还原 HSM。

参数

-BackupFolder

备份的文件夹名称，例如“mhsm--2020101309020403”。它也可以嵌套，例如“backups/mhsm--2020101309020403”。

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Confirm

提示你在运行 cmdlet 之前进行确认。

Type:	SwitchParameter
Aliases:	cf
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

用于与 Azure 通信的凭据、帐户、租户和订阅。

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-HsmName

HSM 的名称。

Type:	String
Position:	1
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-HsmObject

托管 HSM 对象

Type:	PSManagedHsm
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-KeyName

要还原的密钥名称。

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-PassThru

还原 HSM 时返回 true。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-SasToken

用于对存储帐户进行身份验证的共享访问签名（SAS）令牌。

Type:	SecureString
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-StorageAccountName

要存储备份的存储帐户的名称。

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-StorageContainerName

要存储备份的 Blob 容器的名称。

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-StorageContainerUri

要存储备份的存储容器的 URI。

Type:	Uri
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-UseUserManagedIdentity

指定为使用用户托管标识对存储帐户进行身份验证。仅当未设置 SasToken 时有效。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-WhatIf

显示运行该 cmdlet 时会发生什么情况。 cmdlet 未运行。

Type:	SwitchParameter
Aliases:	wi
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

输入

None

输出

Boolean

Share via