en-US/about_WindowsAccessControlCertificatePrivateKeySecurityDescriptor.help.txt
|
.NAME
WindowsAccessControlCertificatePrivateKeySecurityDescriptor .SYNOPSIS Manages the exact DACL of a persisted CNG certificate private key. .DESCRIPTION Compares the private key's access control list against the desired SDDL and rewrites it. The key is addressed by provider, key name, and scope rather than by certificate thumbprint, because a renewal that reuses the key changes the thumbprint. Private key material is never exported or serialized. .PARAMETER ProviderName Key - string The exact expected CNG provider. This increment accepts only Microsoft Software Key Storage Provider. .PARAMETER KeyName Key - string The exact persisted CNG key name whose DACL is managed. .PARAMETER KeyScope Key - string Allowed values: Machine, User Selects the machine or current-user key store. .PARAMETER Sections Key - WindowsSecurityDescriptorSection The security descriptor sections this resource owns. Only the access section is supported for a private key. .PARAMETER Sddl Required - string The desired DACL in SDDL form. Capture it from Get-CertificatePrivateKeySecurityDescriptor. .PARAMETER Reasons Read - WindowsAccessControlDscReason[] Returns why the resource is not in the desired state. Not configurable. |