Start-EpsInstall
Documentation out of date
The documentation below was written for a different copy of this script than the one published now. Read the script itself before you run it, or ask support@invardia.com.
- the .doc.json names no sha256 of the script it documents
- the .doc.json is for version 2.0.0, the published script is 2.0.107
The published script's own summary: Downloads Entra Policy Suite 2.0 Pro - the signed Pro package from Invardia - and starts the install.
Purpose
Downloads Entra Policy Suite 2.0 and runs its Install-EntraPolicySuite.ps1 with your parameters. The Pro copy (invardia.com/support/eps/) signs you in in your browser, takes the signed Pro package of your ring from Invardia and checks its signature, size and SHA-256; the Community copy takes the latest v2 release from GitHub and checks it against the SHA-256 digest GitHub publishes. Either way the package is unpacked in a new temporary folder.
When to run it
To install Entra Policy Suite 2.0, or to resume an install that stopped.
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| other | the rights Install-EntraPolicySuite.ps1 needs | see its page | this script only downloads and starts it |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| this computer | create | a temporary folder with the release zip and its contents | the temp directory | the installer runs from the release | delete the eps-release-* folder in the temp directory |
What it only reads
- the GitHub releases of KnudsenMorten/EntraPolicySuite
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -TenantId | yes | your Entra tenant id | |
| -SubscriptionId | yes | the subscription to install in | |
| -Location | no | westeurope | passed to the installer |
| -ResourceGroup | no | rg-eps | passed to the installer (an install made before 2.0.55: rg-entrapolicysuite, found by itself when it is there) |
| -(every other parameter of Install-EntraPolicySuite.ps1) | no | the installer's | passed on as given - e.g. -PrivateNetwork -VnetId -HubVnetId for a private install (tools/setup/install-parameters.json lists them) |
| -Version | no | the latest v2 | a v2 release, e.g. 2.0.0 |
| -SupportAppId | no | your Invardia Support app, by its client id (never found by name): it starts with -SupportAccess until your level from the Invardia portal arrives; without it nothing is granted | |
| -SupportAccess | no | troubleshoot | the Support app's starting level: troubleshoot or setup (read, plus admin only during an open support session), read, or none |
| -Resume | no | false | continue an interrupted install with the same values (finished steps are skipped); refused when there is none |
Preview with -WhatIf
Downloads and checks the release, then runs the installer with -WhatIf (its plan; nothing is changed in Azure).
Undo
Nothing to undo here; see Install-EntraPolicySuite.ps1.
Network
It connects to: api.github.com, github.com, objects.githubusercontent.com
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/eps/Start-EpsInstall.ps1 -OutFile Start-EpsInstall.ps1
.\Start-EpsInstall.ps1 -TenantId <TenantId> -SubscriptionId <SubscriptionId>To check the download first, compare its SHA-256 with the published one:
SHA-256 f93eb5d9ec76d281555a21089043917480bed01841592a6fcf6582a4114af875
Checksums: SHA256SUMS.txt · Version 2.0.107 · Documentation for version 2.0.0
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Start-EpsInstall.ps1 -Full · Source: Start-EpsInstall.ps1
Every script, identity and permission for your security review: Entra Policy Suite