Skip to main content

Get-XdrVulnerabilityManagementCertificates

SYNOPSIS

Retrieves certificates from Vulnerability Management.

SYNTAX

Default (Default)

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-ProgressAction <ActionPreference>]
[<CommonParameters>]

ServerCertificateIssues

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-ServerCertificateIssues]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

MachineCertificateIssues

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-MachineCertificateIssues]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

PrivateCaCertificateIssues

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-PrivateCaCertificateIssues]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ServerIssuers

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-ServerIssuers]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

MachineIssuers

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-MachineIssuers]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

CountOnly

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-CountOnly]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

CountByExpirationDate

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-CountByExpirationDate]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

AggregatedMachineCertificates

Get-XdrVulnerabilityManagementCertificates [-Force] [-Top <Int32>] [-AggregatedMachineCertificates]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Gets certificate inventory data from TVM in Microsoft Defender XDR. This includes information about server certificates, machine certificates, certificate issues, and issuers. This function includes caching support with a 30-minute TTL to reduce API calls.

EXAMPLES

EXAMPLE 1

Get-XdrVulnerabilityManagementCertificates
Retrieves all certificates using cached data if available.

EXAMPLE 2

Get-XdrVulnerabilityManagementCertificates -Force
Forces a fresh retrieval of certificate inventory, bypassing the cache.

EXAMPLE 3

Get-XdrVulnerabilityManagementCertificates -Top 10
Retrieves only the first 10 certificates.

EXAMPLE 4

Get-XdrVulnerabilityManagementCertificates -ServerCertificateIssues
Retrieves server certificate issues.

EXAMPLE 5

Get-XdrVulnerabilityManagementCertificates -CountOnly
Returns only the total count of certificates.

EXAMPLE 6

Get-XdrVulnerabilityManagementCertificates -AggregatedMachineCertificates
Retrieves aggregated machine certificate data.

PARAMETERS

-Force

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-Top

Limits the number of results returned for paginated endpoints. Useful for previewing data.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False

-ServerCertificateIssues

Retrieves server certificate issues.

Type: SwitchParameter
Parameter Sets: ServerCertificateIssues
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-MachineCertificateIssues

Retrieves machine certificate issues.

Type: SwitchParameter
Parameter Sets: MachineCertificateIssues
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-PrivateCaCertificateIssues

Retrieves private CA certificate issues.

Type: SwitchParameter
Parameter Sets: PrivateCaCertificateIssues
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ServerIssuers

Retrieves server certificate issuers.

Type: SwitchParameter
Parameter Sets: ServerIssuers
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-MachineIssuers

Retrieves machine certificate issuers.

Type: SwitchParameter
Parameter Sets: MachineIssuers
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-CountOnly

Retrieves only the total count of certificates.

Type: SwitchParameter
Parameter Sets: CountOnly
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-CountByExpirationDate

Retrieves certificate count grouped by expiration date.

Type: SwitchParameter
Parameter Sets: CountByExpirationDate
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-AggregatedMachineCertificates

Retrieves aggregated machine certificate data from the aggregatedCertificate endpoint.

Type: SwitchParameter
Parameter Sets: AggregatedMachineCertificates
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

System.Object[]

Returns an array of certificate objects for paginated endpoints.

System.Int64

When -CountOnly is specified, returns the total count as an integer.

System.Management.Automation.PSCustomObject

Returns a single object for non-paginated endpoints (issues, issuers, counts).

Suppress false positive: Switch parameters are used via $PSCmdlet.ParameterSetName, not direct reference

NOTES