Domain Detective

API Reference

Class

CmdletGetCertificateInventoryPolicy

Namespace DomainDetective.PowerShell
Assembly DomainDetective.PowerShell
Base PSCmdlet
Modifiers sealed
Attributes
Cmdlet("Get", "DDCertificateInventoryPolicy") Alias(["Get-CertificateInventoryPolicy"]) OutputType([typeof(CertificateInventoryPolicySummary)])

Evaluates certificate inventory snapshots against baseline policy profiles.

Inheritance

  • PSCmdlet
  • CmdletGetCertificateInventoryPolicy

Examples

Evaluate the default balanced profile for the last 30 days


Get-DDCertificateInventoryPolicy -SinceUtc (Get-Date).ToUniversalTime().AddDays(-30)
        

Run strict baseline and include compliant endpoints


Get-DDCertificateInventoryPolicy -BaselineProfile Strict -IncludeCompliant -MaxEndpoints 500
        

Apply policy overrides from a JSON file


Get-DDCertificateInventoryPolicy -BaselineProfile Balanced -PolicyOverridesPath .\policy-overrides.json
        

Resolve certificate policy from desired state configuration


Get-DDCertificateInventoryPolicy -DesiredStatePath .\desired-state.json -DesiredStateDomain example.com
        

Constructors

Methods

ProcessRecord() #

Executes the cmdlet.

Properties

public String CacheDirectory { get; set; } #
Parameter(Mandatory = false)

Certificate monitor cache directory containing the inventory folder.

public Nullable<DateTime> SinceUtc { get; set; } #
Parameter(Mandatory = false)

Only include snapshots captured since this UTC date/time.

public String BaselineProfile { get; set; } #
Parameter(Mandatory = false) ValidateSet(["Strict", "Balanced", "Legacy"])

Policy baseline profile to evaluate (Strict, Balanced, Legacy).

public SwitchParameter IncludeCompliant { get; set; } #
Parameter(Mandatory = false)

Include endpoints with no policy violations.

public Int32 MaxEndpoints { get; set; } #
Parameter(Mandatory = false) ValidateRange(0, 2147483647)

Maximum endpoint rows returned.

public String PolicyOverridesPath { get; set; } #
Parameter(Mandatory = false)

Optional JSON file path with policy override rules.

public String DesiredStatePath { get; set; } #
Parameter(Mandatory = false)

Optional desired state configuration path used to resolve certificate inventory policy settings.

public String DesiredStateDomain { get; set; } #
Parameter(Mandatory = false)

Domain/subject used to resolve desired state overrides when -DesiredStatePath is provided.

public Nullable<MailDomainClassificationCategory> MailClassification { get; set; } #
Parameter(Mandatory = false)

Optional mail classification used when resolving desired state overrides.

{{ include "footer" }}