Update HPOVApplianceTrustedAuthorityCrl - HewlettPackard/POSH-HPEOneView GitHub Wiki

HPE OneView 4.10 Library

Update-HPOVApplianceTrustedAuthorityCrl

Update appliance certificate authority revocation list.

SYNTAX

Update-HPOVApplianceTrustedAuthorityCrl [-InputObject] <HPOneView.Appliance.TrustedCertificateAuthority[]>[ [-Async] <SwitchParameter>][ [-ApplianceConnection] <Array>] [<CommonParameters>]

Update-HPOVApplianceTrustedAuthorityCrl [-InputObject] <HPOneView.Appliance.TrustedCertificateAuthority[]> [-Path] <FileInfo>[ [-Async] <SwitchParameter>][ [-ApplianceConnection] <Array>] [<CommonParameters>]

Detailed Description

HPE OneView enables users to import a CA CRL file and to perform the appropriate revocation checking on existing certificates in the trust store and for certificates received during communication with a managed device or external server. Certificate revocation checks are enabled by default. However, if a matching CRL has not been imported for a CA-issued certificate, or if a CRL has expired, the appliance bypasses the revocation check for the associated certificate when performing an HTTPS connection. If you want to restrict (or relax) revocation checking, use the options below on the edit screen.

The Cmdlet will attempt to download the CRL from the HTTP location specified within the TrustedCertificateAuthority object. You can manually download the updated CRL and use the -Path paramter to specify the offline CRL.

Parameters

-ApplianceConnection <Array>

Aliases [-Appliance]

Specify one or more HPOneView.Appliance.Connection object(s) or Name property value(s).

Default Value: ${Global:ConnectedSessions} | ? Default

Aliases	Appliance
Required?	False
Position?	named
Default value	(${Global:ConnectedSessions} \| ? Default)
Accept pipeline input?	true (ByPropertyName)
Accept wildcard characters?	False

-Async <SwitchParameter>

Use this parameter to immediately return the async task. By default, the Cmdlet will wait for the task to complete.

Aliases	None
Required?	False
Position?	named
Default value	False
Accept pipeline input?	false
Accept wildcard characters?	False

-InputObject <HPOneView.Appliance.TrustedCertificateAuthority[]>

HPOneView.Appliance.TrustedCertificateAuthority resource from Get-HPOVApplianceTrustedCertificate.

Aliases	None
Required?	true
Position?	named
Default value
Accept pipeline input?	true (ByValue)
Accept wildcard characters?	False

-Path <FileInfo>

Path to manually downloaded CRL.

Aliases	None
Required?	true
Position?	named
Default value
Accept pipeline input?	false
Accept wildcard characters?	False

This cmdlet supports the common parameters: Verbose, Debug, ErrorAction, ErrorVariable, WarningAction, WarningVariable, OutBuffer, PipelineVariable, and OutVariable. For more information, see about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216)

Input Types

HPOneView.Appliance.TrustedCertificateAuthority

resource from Get-HPOVApplianceTrustedCertificate.

Return Values

HPOneView.Appliance.TaskResource [System.Management.Automation.PSCustomObject]

Asyncronous task resource to monitor.

Examples

-------------------------- EXAMPLE 1 --------------------------

Get-HPOVApplianceTrustedCertificate -Name "VeriSign Class 3 Public Primary Certification Authority - G5" | Update-HPOVApplianceTrustedAuthorityCrl

Update the built-in certificate authority resource.

-------------------------- EXAMPLE 2 --------------------------

# Download CA CRL for offline use $CA = Get-HPOVApplianceTrustedCertificate -CertificateAuthoritiesOnly -Name "DigiCert Global CA G2" Invoke-WebRequest -Uri $CA.CRLInfo.EndPointList[0] -OutFile C:\Directory\CA-updated.crl # Copy offline CRL to other PC Get-HPOVApplianceTrustedCertificate -CertificateAuthoritiesOnly -Name "DigiCert Global CA G2" | Update-HPOVApplianceTrustedAuthorityCrl -Path C:\Directory\CA-updated.crl

Update the built-in certificate authority resource.

HPE OneView 4.00 Library