Switch the guardian mode for a 2016 Hyper-V box.
Learn how to switch the guardian mode for a 2016 Hyper-V host
John Savill
July 21, 2016
1 Min Read
![Switch the guardian mode for a 2016 Hyper-V box. Switch the guardian mode for a 2016 Hyper-V box.](https://eu-images.contentstack.com/v3/assets/blt07f68461ccd75245/blt0a9ae5fa9cce929a/66180f4c545623bd15fec5ce/changing-guards-959470960720_0_0.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Q. How can I switch the mode of a Hyper-V server between local guardians and a Host Guardian Server?
A. To configured a Hyper-V server to use a Host Guardian Server (HGS) for attestation and key protection the URL of those services are specified for the HGS client configuration. For example:
Set-HgsClientConfiguration -AttestationServerUrl 'http://hgs.savtechhgs.net/Attestation' `-KeyProtectionServerUrl 'http://hgs.savtechhgs.net/KeyProtection'Get-HgsClientConfiguration
To set a Hyper-V server back to use local guardians use:
Set-HgsClientConfiguration -EnableLocalMode
Once you make this change VMs that are shielded and use the HGS will not start unless the local guardian for the key protector exists on the machines local certificate store. To switch a server back to using HGS simply run the first command again specifying the attestation and key protection URLs.
About the Author
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
You May Also Like