Get-CIPolicy

NAME Get-CIPolicy



SYNOPSIS

Gets the rules in a Code Integrity policy.





SYNTAX

Get-CIPolicy [-FilePath] <String> [<CommonParameters>]





DESCRIPTION

The Get-CIPolicy cmdlet returns the rules in a Code Integrity policy. Specify a policy .xml file. This cmdlet does not currently support policies

in Public-Key Cryptography Standards #7 format (.p7b files).





PARAMETERS

-FilePath <String>

Specifies the path of the policy .xml file for which this cmdlet gets rules.



Required? true

Position? 1

Default value none

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).



INPUTS











OUTPUTS

Rule



This cmdlet returns rules from the policy.





Example 1: Get rules from a policy



PS C:\\>Get-CIPolicy -FilePath '.\\Policy.xml'

Name : MSIT Test CodeSign CA 3

Id : ID_SIGNER_S_17

TypeId : Allow

Root : FA6B9A2230CE08BCA81D096B28CF495672401D3A43A0D285CF352464A6C9C7FD

FileVersionRef :

Wellknown : False

Ekus :

Exceptions :

FileAttributes :

FileException : False

UserMode : False



Name : VeriSign Class 3 Code Signing 2010 CA

Id : ID_SIGNER_S_1D

TypeId : Allow

Root : 4843A82ED3B1F2BFBEE9671960E1940C942F688D

FileVersionRef :

Wellknown : False

Ekus :

Exceptions :

FileAttributes :

FileException : False

UserMode : False



Name : Microsoft Windows Third Party Component CA 2012

Id : ID_SIGNER_S_1E

TypeId : Allow

Root : CEC1AFD0E310C55C1DCC601AB8E172917706AA32FB5EAF826813547FDF02DD46

FileVersionRef :

Wellknown : False

Ekus :

Exceptions :

FileAttributes :

FileException : False

UserMode : False



This command returns the rule objects from Policy.xml. For this example, we present only the first few rules.







RELATED LINKS

Merge-CIPolicy

New-CIPolicyRule