az attestation signer
Note
This reference is part of the attestation extension for the Azure CLI (version 2.55.0 or higher). The extension will automatically install the first time you run an az attestation signer command. Learn more about extensions.
Command group 'attestation' is experimental and under development. Reference and support levels: https://aka.ms/CLI_refstatus
Manage signers.
Commands
| Name | Description | Type | Status |
|---|---|---|---|
| az attestation signer add |
Adds a new attestation policy certificate to the set of policy management certificates. |
Extension | Experimental |
| az attestation signer list |
Retrieves the set of certificates used to express policy for the current tenant. |
Extension | Experimental |
| az attestation signer remove |
Removes the specified policy management certificate. |
Extension | Experimental |
az attestation signer add
Command group 'attestation signer' is experimental and under development. Reference and support levels: https://aka.ms/CLI_refstatus
Adds a new attestation policy certificate to the set of policy management certificates.
az attestation signer add [--id]
[--name]
[--resource-group]
[--signer]
[--signer-file]Examples
Adds a new attestation policy certificate to the set of policy management certificates.
az attestation signer add -n "myattestationprovider" -g "MyResourceGroup" --signer "eyAiYWxnIjoiUlMyNTYiLCAie..."Optional Parameters
Resource ID of the provider. Please omit --resource-group/-g or --name/-n if you have already specified --id.
Name of the attestation provider.
Name of resource group. You can configure the default group using az configure --defaults group=<name>.
The policy certificate to add. An RFC7519 JSON Web Token containing a claim named "maa-policyCertificate" whose value is an RFC7517 JSON Web Key which specifies a new key to update. The RFC7519 JWT must be signed with one of the existing signing certificates.
File name of the signer. (--signer and --signer-file/-f are mutually exclusive.).
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.
Increase logging verbosity. Use --debug for full debug logs.
az attestation signer list
Command group 'attestation signer' is experimental and under development. Reference and support levels: https://aka.ms/CLI_refstatus
Retrieves the set of certificates used to express policy for the current tenant.
az attestation signer list [--id]
[--name]
[--resource-group]Examples
Retrieves the set of certificates used to express policy for the current tenant.
az attestation signer list -n "myattestationprovider" -g "MyResourceGroup"Optional Parameters
Resource ID of the provider. Please omit --resource-group/-g or --name/-n if you have already specified --id.
Name of the attestation provider.
Name of resource group. You can configure the default group using az configure --defaults group=<name>.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.
Increase logging verbosity. Use --debug for full debug logs.
az attestation signer remove
Command group 'attestation signer' is experimental and under development. Reference and support levels: https://aka.ms/CLI_refstatus
Removes the specified policy management certificate.
az attestation signer remove [--id]
[--name]
[--resource-group]
[--signer]
[--signer-file]Examples
Removes the specified policy management certificate.
az attestation signer remove -n "myattestationprovider" -g "MyResourceGroup" --signer "eyAiYWxnIjoiUlMyNTYiLCAie..."Optional Parameters
Resource ID of the provider. Please omit --resource-group/-g or --name/-n if you have already specified --id.
Name of the attestation provider.
Name of resource group. You can configure the default group using az configure --defaults group=<name>.
The policy certificate to remove. An RFC7519 JSON Web Token containing a claim named "maa-policyCertificate" whose value is an RFC7517 JSON Web Key which specifies a new key to update. The RFC7519 JWT must be signed with one of the existing signing certificates.
File name of the signer. (--signer and --signer-file/-f are mutually exclusive.).
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.
Increase logging verbosity. Use --debug for full debug logs.
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for