en-US/about_WindowsAccessControlCertificatePrivateKeyAccessRule.help.txt
|
.NAME
WindowsAccessControlCertificatePrivateKeyAccessRule .SYNOPSIS Ensures one exact explicit private key access rule is present or absent. .DESCRIPTION The composite key identifies exactly one explicit access control entry on a persisted CNG certificate private key. The key is addressed by provider, key name, and scope rather than by certificate thumbprint, because a renewal that reuses the key changes the thumbprint. Private key material is never exported or serialized. .PARAMETER ProviderName Key - string The exact expected CNG provider. This increment accepts only Microsoft Software Key Storage Provider. .PARAMETER KeyName Key - string The exact persisted CNG key name the rule applies to. .PARAMETER KeyScope Key - string Allowed values: Machine, User Selects the machine or current-user key store. .PARAMETER Account Key - string The principal the rule applies to. An alias is normalized by security identifier, so any spelling that resolves to the same principal matches. .PARAMETER AccessRights Key - WindowsCryptoKeyRights The exact crypto key rights the entry grants or denies. .PARAMETER AccessControlType Key - System.Security.AccessControl.AccessControlType Whether the entry is an allow or a deny entry. .PARAMETER Ensure Write - WindowsAccessControlDscEnsure Whether the exact entry must be present or absent. Defaults to Present. .PARAMETER Reasons Read - WindowsAccessControlDscReason[] Returns why the resource is not in the desired state. Not configurable. |