This is the built-in help made by Microsoft for the command 'Copy-NetIPsecQuickModeCryptoSet', in PowerShell version 3 - as retrieved from
Windows version 'Microsoft Windows Server 2012 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Copies an entire quick mode cryptographic set to the same or to a different policy store.
Copy-NetIPsecQuickModeCryptoSet [-All [<SwitchParameter>]] [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-GPOSession <String>]
[-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>]
[-ThrottleLimit <Int32>] [-TracePolicyStore [<SwitchParameter>]] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-NewGPOSession <String>] [-NewName <String>]
[-NewPolicyStore <String>] [-PassThru [<SwitchParameter>]] [-ThrottleLimit <Int32>] -InputObject <CimInstance[]> [-Confirm
[<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-GPOSession <String>] [-NewGPOSession <String>]
[-NewName <String>] [-NewPolicyStore <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>] [-ThrottleLimit <Int32>]
[-TracePolicyStore [<SwitchParameter>]] -DisplayName <String[]> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-Name] <String[]> [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-GPOSession <String>]
[-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>]
[-ThrottleLimit <Int32>] [-TracePolicyStore [<SwitchParameter>]] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-Description <String[]>] [-DisplayGroup <String[]>]
[-GPOSession <String>] [-Group <String[]>] [-NewGPOSession <String>] [-NewName <String>] [-NewPolicyStore <String>] [-PassThru
[<SwitchParameter>]] [-PerfectForwardSecrecyGroup <DiffieHellmanGroup[]>] [-PolicyStore <String>] [-PolicyStoreSource <String[]>]
[-PolicyStoreSourceType <PolicyStoreType[]>] [-PrimaryStatus <PrimaryStatus[]>] [-Status <String[]>] [-ThrottleLimit <Int32>]
[-TracePolicyStore [<SwitchParameter>]] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Copy-NetIPsecQuickModeCryptoSet [-AsJob [<SwitchParameter>]] [-CimSession <CimSession[]>] [-GPOSession <String>] [-NewGPOSession <String>]
[-NewName <String>] [-NewPolicyStore <String>] [-PassThru [<SwitchParameter>]] [-PolicyStore <String>] [-ThrottleLimit <Int32>]
[-TracePolicyStore [<SwitchParameter>]] -AssociatedNetIPsecRule <CimInstance> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
The Copy-NetIPsecQuickModeCryptoSet cmdlet copies a main mode cryptographic set, making a complete clone, to a policy store. When a new policy
store is not specified, it is copied to the same policy store with a new name specified by the user.
This cmdlet gets one or more cryptographic sets to be duplicated with the Name parameter (default), the DisplayName parameter, set properties,
or by the associated filters or objects. The resulting queried set is copied to a new policy store using the NewPolicyStore parameter, a new
GPO session using the NewGPOSession parameter, or to the same policy store using the NewName. Note: Only one quick mode cryptographic set can
be copied at a time when copying to the same policy store. This is because only a single cryptographic set can use the unique identifier, or
name specified by the NewName parameter.
When copying a set to a new policy store, the unique name of the set is preserved. This means that if the same set is attempted to be copied
twice, then an error is displayed for the second attempt indicating that the object already exists. To overwrite the target set, run the
Remove-NetIPsecQuickModeCryptoSet cmdlet first. If it is possible that the object may already exist, then specify the ErrorAction parameter to
silently ignore these errors, instead of running the Remove-NetIPsecQuickModeCryptoSet cmdlet.
<
Copy-NetIPsecPhase1AuthSet
Copy-NetIPsecPhase2AuthSet
Copy-NetIPsecRule
Get-NetIPsecRule
New-NetIPsecMainModeRule
New-NetIPsecQuickModeCryptoSet
Open-NetGPO
Remove-NetIPsecQuickModeCryptoSet
Save-NetGPO
Set-NetIPsecQuickModeCryptoSet
New-GPO
<
EXAMPLE 1
PS C:\> Copy-NetIPsecQuickModeCryptoSet –DisplayName "Quick Mode Crypto Set" -NewName "Alternate Quick Mode Crypto Set"
This example copies a quick mode cryptographic set, found by specifying the localized name, to the current policy store under a new unique
identifier.
EXAMPLE 2
PS C:\> $iPsecRule = Get-NetIPsecRule –DisplayName "IPsec Rule: P2Auth + Crypto" –PolicyStore domain.contoso.com\GPO_name
PS C:\> Copy-NetIPsecPhase1AuthSet –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO
PS C:\> Copy-NetIPsecPhase2AuthSet –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO
PS C:\> Copy-NetIPsecQuickModeCryptoSet –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO
PS C:\> Copy-NetIPsecRule –ImportObject $iPsecRule -NewPolicyStore domain.contoso.com\new_GPO
This accomplishes the same task but takes advantage of caching the GPO to apply the changes locally.
PS C:\> $iPsecRule = Get-NetIPsecRule –DisplayName "IPsec Rule: P2Auth + Crypto" –PolicyStore domain.contoso.com\GPO_name
PS C:\> $newGPO = Open-NetGPO –PolicyStore domain.contoso.com\new_GPO
PS C:\> Copy-NetIPsecPhase1AuthSet –ImportObject $iPsecRule –GPOSession $newGPO
PS C:\> Copy-NetIPsecPhase2AuthSet –ImportObject $iPsecRule –GPOSession $newGPO
PS C:\> Copy-NetIPsecQuickModeCryptoSet –ImportObject $iPsecRule –GPOSession $newGPO
PS C:\> Copy-NetIPsecRule –ImportObject $iPsecRule –GPOSession $newGPO
PS C:\> Save-NetGPO –GPOSession $newGPO
This example copies an entire IPsec rule and the associated cryptographic sets to a new policy store separately. There is no need to link the
newly copied sets to the newly copied rule since the set fields of the rules maintain the Name parameter value of the source.