PowerShell Logo Small

Copy-NetIPsecQuickModeCryptoSet



This is the built-in help made by Microsoft for the command 'Copy-NetIPsecQuickModeCryptoSet', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Copies an entire quick mode cryptographic set to the same or to a different policy store.

SYNTAX


Copy-NetIPsecQuickModeCryptoSet [-All] [-AsJob] [-CimSession <CimSession[]>] [-GPOSession <String>] [-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>]
[-PassThru] [-PolicyStore <String>] [-ThrottleLimit <Int32>] [-TracePolicyStore] [-Confirm] [-WhatIf] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-Name] <String[]> [-AsJob] [-CimSession <CimSession[]>] [-GPOSession <String>] [-NewGPOSession <String>] [-NewName <String>]
[-NewPolicyStore <String>] [-PassThru] [-PolicyStore <String>] [-ThrottleLimit <Int32>] [-TracePolicyStore] [-Confirm] [-WhatIf] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob] [-CimSession <CimSession[]>] [-GPOSession <String>] [-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>]
[-PassThru] [-PolicyStore <String>] [-ThrottleLimit <Int32>] [-TracePolicyStore] -DisplayName <String[]> [-Confirm] [-WhatIf] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob] [-CimSession <CimSession[]>] [-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>] [-PassThru] [-ThrottleLimit
<Int32>] -InputObject <CimInstance[]> [-Confirm] [-WhatIf] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob] [-CimSession <CimSession[]>] [-GPOSession <String>] [-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>]
[-PassThru] [-PolicyStore <String>] [-ThrottleLimit <Int32>] [-TracePolicyStore] -AssociatedNetIPsecRule <CimInstance> [-Confirm] [-WhatIf] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob] [-CimSession <CimSession[]>] [-Description <String[]>] [-DisplayGroup <String[]>] [-GPOSession <String>] [-Group <String[]>]
[-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>] [-PassThru] [-PerfectForwardSecrecyGroup <DiffieHellmanGroup[]>] [-PolicyStore <String>]
[-PolicyStoreSource <String[]>] [-PolicyStoreSourceType <PolicyStoreType[]>] [-PrimaryStatus <PrimaryStatus[]>] [-Status <String[]>] [-ThrottleLimit <Int32>]
[-TracePolicyStore] [-Confirm] [-WhatIf] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Copy-NetIPsecQuickModeCryptoSet cmdlet copies a main mode cryptographic set, making a complete clone, to a policy store. When a new policy store is not specified, it is
copied to the same policy store with a new name specified by the user.


This cmdlet gets one or more cryptographic sets to be duplicated with the Name parameter (default), the DisplayName parameter, set properties, or by the associated filters
or objects. The resulting queried set is copied to a new policy store using the NewPolicyStore parameter, a new GPO session using the NewGPOSession parameter, or to the same
policy store using the NewName. Note: Only one quick mode cryptographic set can be copied at a time when copying to the same policy store. This is because only a single
cryptographic set can use the unique identifier, or name specified by the NewName parameter.


When copying a set to a new policy store, the unique name of the set is preserved. This means that if the same set is attempted to be copied twice, then an error is
displayed for the second attempt indicating that the object already exists. To overwrite the target set, run the Remove-NetIPsecQuickModeCryptoSet cmdlet first. If it is
possible that the object may already exist, then specify the ErrorAction parameter to silently ignore these errors, instead of running the Remove-NetIPsecQuickModeCryptoSet
cmdlet.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?LinkId=216654
Copy-NetIPsecPhase1AuthSet
Copy-NetIPsecPhase2AuthSet
Copy-NetIPsecRule
Get-NetIPsecRule
New-NetIPsecMainModeRule
New-NetIPsecQuickModeCryptoSet
Open-NetGPO
Remove-NetIPsecQuickModeCryptoSet
Save-NetGPO
Set-NetIPsecQuickModeCryptoSet
New-GPO

REMARKS

<

Examples


EXAMPLE 1

PS C:\>Copy-NetIPsecQuickModeCryptoSet –DisplayName "Quick Mode Crypto Set" -NewName "Alternate Quick Mode Crypto Set"



This example copies a quick mode cryptographic set, found by specifying the localized name, to the current policy store under a new unique identifier.




EXAMPLE 2

PS C:\>$iPsecRule = Get-NetIPsecRule –DisplayName "IPsec Rule: P2Auth + Crypto" –PolicyStore domain.contoso.com\GPO_name



PS C:\>Copy-NetIPsecPhase1AuthSet –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO



PS C:\>Copy-NetIPsecPhase2AuthSet –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO



PS C:\>Copy-NetIPsecQuickModeCryptoSet –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO



PS C:\>Copy-NetIPsecRule –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO


This accomplishes the same task but takes advantage of caching the GPO to apply the changes locally.
PS C:\>$iPsecRule = Get-NetIPsecRule –DisplayName "IPsec Rule: P2Auth + Crypto" –PolicyStore domain.contoso.com\GPO_name



PS C:\>$newGPO = Open-NetGPO –PolicyStore domain.contoso.com\new_GPO



PS C:\>Copy-NetIPsecPhase1AuthSet –ImportObject $iPsecRule –GPOSession $newGPO



PS C:\>Copy-NetIPsecPhase2AuthSet –ImportObject $iPsecRule –GPOSession $newGPO



PS C:\>Copy-NetIPsecQuickModeCryptoSet –ImportObject $iPsecRule –GPOSession $newGPO



PS C:\>Copy-NetIPsecRule –ImportObject $iPsecRule –GPOSession $newGPO



PS C:\>Save-NetGPO –GPOSession $newGPO



This example copies an entire IPsec rule and the associated cryptographic sets to a new policy store separately. There is no need to link the newly copied sets to the newly
copied rule since the set fields of the rules maintain the Name parameter value of the source.