Set-HVCIOptions

Module:
configci
Modifies hypervisor Code Integrity options for a policy.

Syntax 

Set-HVCIOptions
   [-Enabled]
   [-Strict]
   [-DebugMode]
   [-FilePath] <String>
   [<CommonParameters>]
Set-HVCIOptions
   [-None]
   [-FilePath] <String>
   [<CommonParameters>]

Description

The Set-HVCIOptions cmdlet modifies hypervisor Code Integrity options for a policy. The policy stores these options in the HvciOptions property of the policy. You can specify any combination of the following values:

  • Enabled
  • DebugMode
  • Strict

Examples

Example 1: Assign the Strict option 

PS C:\> Set-HVCIOptions -Strict -FilePath '.\Policy.xml'   
PS C:\> Get-Content -Path '.Policy.xml'
    <CiSigner SignerId="ID_SIGNER_S_21" />
  </CiSigners>
  <HvciOptions>2</HvciOptions>
</SiPolicy>

The first command assigns the Strict option in Policy.xml.

The second command displays the contents of the policy. This example shows the last few lines of the policy, which include the HvciOptions property. It now has a value of 2.

Required Parameters

-FilePath

Specifies the path of the policy .xml file that this cmdlet modifies.

Type: String
Aliases: f
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Optional Parameters

-DebugMode

Indicates that this cmdlet turns on DebugMode in the policy.

Type: SwitchParameter
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Enabled

Indicates that this cmdlet turns on Enabled in the policy.

Type: SwitchParameter
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-None

Indicates that this cmdlet removes all hypervisor Code Integrity options from the policy. In the policy itself, HvciOptions takes a value of zero (0).

Type: SwitchParameter
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Strict

Indicates that this cmdlet turns on Strict in the policy.

Type: SwitchParameter
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False