This is the built-in help made by Microsoft for the command 'Set-NetIPsecPhase2AuthSet', in PowerShell version 3 - as retrieved from
Windows version 'Microsoft Windows Server 2012 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Modifies existing phase 2 authentication sets.
Set-NetIPsecPhase2AuthSet [-Name] <String[]> [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-Description <String>] [-GPOSession
<String>] [-NewDisplayName <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>] [-Proposal <CimInstance[]>] [-ThrottleLimit
<Int32>] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Set-NetIPsecPhase2AuthSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-Description <String>] [-GPOSession <String>]
[-NewDisplayName <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>] [-Proposal <CimInstance[]>] [-ThrottleLimit <Int32>]
-DisplayGroup <String[]> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Set-NetIPsecPhase2AuthSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-Description <String>] [-GPOSession <String>]
[-NewDisplayName <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>] [-Proposal <CimInstance[]>] [-ThrottleLimit <Int32>]
-DisplayName <String[]> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Set-NetIPsecPhase2AuthSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-Description <String>] [-NewDisplayName <String>]
[-PassThru [<SwitchParameter>]] [-Proposal <CimInstance[]>] [-ThrottleLimit <Int32>] -InputObject <CimInstance[]> [-Confirm
[<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Set-NetIPsecPhase2AuthSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-Description <String>] [-GPOSession <String>]
[-NewDisplayName <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>] [-Proposal <CimInstance[]>] [-ThrottleLimit <Int32>] -Group
<String[]> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
The Set-NetIPsecPhase2AuthSet cmdlet modifies cryptographic set properties of existing main mode cryptographic sets.
This cmdlet gets one or more phase 2 authentication sets to be modified with the Name parameter (default), DisplayName parameter, or by group
association using the Group or DisplayGroup parameter. The Get-NetIPsecPhase2AuthSet cmdlet returns the sets queried by property and pipes the
sets into this cmdlet. The remaining parameters specify the properties of the set to be modified. When a group is specified, all of the sets
associated with the group receive the same modifications. The rule parameters modified using the dot-notation are committed with this cmdlet.
To move a set to a new GPO, copy the existing set by running the Copy-NetIPsecPhase2AuthSet cmdlet with the NewPolicyStore parameter, then
remove the old set with the Remove-NetIPsecPhase2AuthSet cmdlet.
<
Copy-NetIPsecPhase2AuthSet
Get-NetIPsecMainModeCryptoSet
Get-NetIPsecPhase2AuthSet
New-NetIPsecMainModeCryptoSet
New-NetIPsecRule
Open-NetGPO
Remove-NetIPsecPhase2AuthSet
Save-NetGPO
Set-NetIPsecMainModeCryptoSet
Set-NetIPsecRule
New-GPO
<
EXAMPLE 1
PS C:\> $NewCertProposal = New-NetIPsecAuthProposal -User –Cert -Authority "C=US,O=MSFT,CN=Microsoft Root Authority" -AuthorityType Root
PS C:\> Set-NetIPsecPhase2AuthSet -DisplayName "User Certificate Auth Set" –Proposal $NewCertProposal
This example replaces the proposals of an existing authentication set.
EXAMPLE 2
PS C:\> Set-NetIPsecPhase2AuthSet -DisplayGroup "Authenticate with Certificates" –NewDisplayName "User Authentication Certificates"
This example modifies the display of a phase 1 authentication set.