Summary
Validates PC components against HP Platform Certificate.
Syntax
Invoke-HPPlatformIntegrityCheck -PlatformCertificate <String> [-NoInstallPlatformCertificate] [<CommonParameters>]
Invoke-HPPlatformIntegrityCheck -UseLocalPlatformCertificate [<CommonParameters>]
Invoke-HPPlatformIntegrityCheck -UseOssIntegration [-Url <String>] [-ClientId <String>] [-ClientSecret <String>] [-NoInstallPlatformCertificate] [<CommonParameters>]
Description
This cmdlet verifies that the current PC's components and configuration match the specifications in the HP Platform Certificate.
Components and configuration in scope include disk, memory, processor, graphic card, chassis, baseboard, networking, PCIe devices, NVMe devices, BIOS firmware version, feature byte, UUID, and Endpoint Security Controller (EpSC) ID certificate hash included in the PC.
Parameters
| Name | Argument | Description |
|---|---|---|
| PlatformCertificate | <String> | Specifies the path to a platform certificate file, directory containing platform certificates, or zip file with platform certificates. When using a directory or zip file, the tool searches for files named in the format: HPInc.<serial_number>.BASE.cer |
| UseLocalPlatformCertificate | <SwitchParameter> | If specified, this command uses the Platform Certificate that is stored locally in the PC. The default locations for the certificate are: EFI System Partition: /boot/tcg/cert/platform/ or \efi\tcg\cert\platform UEFI Variable: HpPlatformCertificateBase GUID {B44ED025-A047-4312-9E62-A1C3ACC8684D} |
| NoInstallPlatformCertificate | <SwitchParameter> | If specified, the command will not save the Platform Certificate passed into the PlatformCertificate parameter locally on the PC. |
| UseOssIntegration | <SwitchParameter> | If specified, this command uses the OSS (Order Status Service) API integration to retrieve the platform certificate. When this option is used, the tool can automatically prompt for OSS API credentials (client ID and client secret) and retrieve the platform certificate for the current device from the OSS system. Optional connection details can be supplied with `-Url`, `-ClientId`, and `-ClientSecret`. This option requires network connectivity and valid OSS API credentials. |
| Url | <String> | Specifies a custom OSS API endpoint URL for integration operations. This parameter is optional and can be used with the -UseOssIntegration parameter to override the default OSS API endpoint. If not specified, the tool uses the default production OSS API endpoint. |
| ClientId | <String> | Specifies the OSS integration client identifier used to authenticate when `-UseOssIntegration` is provided. If omitted, the cmdlet first prompts the user to enter the client ID interactively before asking for the client secret. |
| ClientSecret | <String> | Specifies the OSS integration client secret used together with `-ClientId` when `-UseOssIntegration` is enabled. Provide this value when using custom OSS credentials or automation scenarios. When not supplied, the cmdlet securely prompts for the secret immediately after the client ID prompt. |
Examples
PS C:\> Invoke-HPPlatformIntegrityCheck -UseLocalPlatformCertificatePS C:\> Invoke-HPPlatformIntegrityCheck -PlatformCertificate 'C:\Users\Tools\Test\ HPInc.SCN3315BDN.BASE.cer'PS C:\> Invoke-HPPlatformIntegrityCheck -PlatformCertificate 'C:\Users\Tools\Test\ HPInc.SCN3315BDN.BASE.cer' -NoInstallPlatformCertificatePS C:\> Invoke-HPPlatformIntegrityCheck -PlatformCertificate C:\Users\Tools\Test
PS C:\> Invoke-HPPlatformIntegrityCheck -PlatformCertificate C:\Users\Tools\Test\Certificates.zip
PS C:\> Invoke-HPPlatformIntegrityCheck -UseOssIntegrationPS C:\> Invoke-HPPlatformIntegrityCheck -UseOssIntegration -Url "https://custom-oss-api.example.com/api/v1/platformCerts" -ClientId "your-client-id" -ClientSecret "your-client-secret"PS C:\> Invoke-HPPlatformIntegrityCheck -UseOssIntegration -Url "https://custom-oss-api.example.com/api/v1/platformCerts"PS C:\> Invoke-HPPlatformIntegrityCheck -UseOssIntegration -ClientId "your-client-id" -ClientSecret "your-client-secret"Notes
- This cmdlet performs comprehensive hardware and firmware validation against the platform certificate
- When using -PlatformCertificate without -NoInstallPlatformCertificate, the certificate will be installed locally
- The tool verifies multiple components: disk, memory, processor, graphics, chassis, baseboard, network devices, PCIe devices, NVMe devices, BIOS version, feature byte, UUID, and EpSC ID certificate hash
- When using -UseOssIntegration, valid OSS API credentials and network connectivity are required
- The validation process compares current system configuration against the specifications in the platform certificate