Request-SILicense
Ask Invardia for this install's Pro licence, and install it
Purpose
Asks Invardia for this install's SecurityInsight Pro licence, and installs it into the Key Vault once it is approved (-Status shows the state only).
When to run it
When the install has no licence and the automatic request did not run.
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| azureRbac | Key Vault Secrets Officer | the SecurityInsight Key Vault | to store the request state and the licence |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Invardia | create | a licence request for this tenant / install | Invardia (https://invardia.com) | the licence is issued by Invardia | Invardia support withdraws the request | |
| Key Vault secrets | update | SI-LicenceRequest-State, and SI-License once approved | the SecurityInsight Key Vault | remember the request and install the licence | restore the previous secret versions |
What it only reads
- the request state in the vault
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -Status | no | Show where the request stands, and change nothing. | |
| -Force | no | Ask or check NOW: also after a rejection (otherwise not asked again for 7 days) and before the next check time. | |
| -VaultName | no | Override the vault. Normally resolved from config\SecurityInsight.custom.ps1. | |
| -ContactEmail | no | Who Invardia may contact about this request. Default: $global:SI_LicenseRequest_ContactEmail (not sent when unset). | |
| -Edition | no | The edition asked for (optional). Default: $global:SI_LicenseRequest_Edition. | |
| -BaseUrl | no | Default: $global:SI_LicenseRequest_BaseUrl, else https://invardia.com. |
Preview with -WhatIf
Shows the licence request state only (as -Status); nothing is requested and no licence is installed.
Undo
Restore the previous secret versions; ask Invardia to withdraw the request.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics.io, api.msrc.microsoft.com, api.security.microsoft.com, api.securitycenter.microsoft.com, api.securityplatform.microsoft.com, database.windows.net, entra.microsoft.com, graph.microsoft.com, invardia.com, licenses.nuget.org, login.microsoftonline.com, management.azure.com, monitor.azure.com, nvd.nist.gov, outlook.office.com, outlook.office365.com, portal.invardia.com, storage.azure.com, vault.azure.net
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/si/Request-SILicense.ps1 -OutFile Request-SILicense.ps1
.\Request-SILicense.ps1To check the download first, compare its SHA-256 with the published one:
SHA-256 f21c496bb3f4508c60e755e5342851aa05ddb280e99d20b8baef010c69edca42
Checksums: SHA256SUMS.txt · Version 3.0.79
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Request-SILicense.ps1 -Full · Source: Request-SILicense.ps1
Every script, identity and permission for your security review: SecurityInsight