View key protectors for shielded VM

View key protectors for shielded VM

Q. How can I view the key protectors for a shielded VM?

A. To check the key protectors and certificates used for a shielded VM use the following PowerShell:

$kp = Get-VMKeyProtector -VMName ShieldedVM
$hgskp = ConvertTo-HgsKeyProtector $kp
$hgskp.Owner | fl SigningCertificate, EncryptionCertificate

If you have additional guardians these could be viewed by looking at $hgskp.Guardians.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.