View key protectors for shielded VM

Q. How can I view the key protectors for a shielded VM?

A. To check the key protectors and certificates used for a shielded VM use the following PowerShell:

$kp = Get-VMKeyProtector -VMName ShieldedVM
$hgskp = ConvertTo-HgsKeyProtector $kp
$hgskp.Owner | fl SigningCertificate, EncryptionCertificate

If you have additional guardians these could be viewed by looking at $hgskp.Guardians.