Invoke-HcsmEncryptionKeyRollover
Invoke-HcsmEncryptionKeyRollover
Changes a service data encryption key.
语法
Parameter Set: Default
Invoke-HcsmEncryptionKeyRollover [-ServiceDataEncryptionKey <SecureString> ] [ <CommonParameters>]
详细说明
The Invoke-HcsmServiceDataEncryptionKeyChange cmdlet changes a service data encryption key for StorSimple Manager. Configure the new key on all registered devices. When you run this cmdlet on the first device to update, the cmdlet creates a key. For all other registered devices, specify that key as the value of the ServiceDataEncryptionKey parameter.
参数
-ServiceDataEncryptionKey<SecureString>
Specifies the new encryption key as a secure string. Do not specify this parameter for the first of the registered devices that you update.
别名 |
无 |
是否为必需？ |
false |
位置？ |
named |
默认值 |
无 |
是否接受管道输入？ |
false |
是否接受通配符？ |
false |
<CommonParameters>
此 cmdlet 支持通用参数：-Verbose、-Debug、-ErrorAction、-ErrorVariable、-OutBuffer 和 -OutVariable。有关详细信息，请参阅 about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
输入
输入类型是指可通过管道传送给 cmdlet 的对象的类型。
输出
输出类型是 cmdlet 所发出对象的类型。
示例
---------- Example 1: Configure key for first device ----------
This command configures the device to generate and use a new service data encryption key. To change encryption keys on your devices, run this command on the first device. The cmdlet generates a password to use on other devices.
PS C:\> Invoke-HcsmServiceDataEncryptionKeyChange
---------- Example 2: Configure key for subsequent devices ----------
The first command uses the ConvertTo-SecureString cmdlet to convert a plaintext password into a secure string, and then stores the result in the $passKey variable. For more information, type Get-Help ConvertTo-SecureString. The password that the command converts is the password that you generated on the first device, as in the previous example.
The second command uses the current cmdlet to configure the device to use the new service data encryption key. The command specifies the password stored in $passKey.
PS C:\> $passKey = ConvertTo-SecureString -String "Password" -AsPlainText -Force
PS C:\> Invoke-HcsmServiceDataEncryptionKeyChange –ServiceDataEncryptionKey $passKey