Set-SIInstallRing
Record this install's update ring
Purpose
Records this install's update ring in the Pro database, so the web app shows it.
When to run it
When the install's ring changes (normally set by Invardia and the updater).
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| other | the install identity (service principal + certificate) | the Pro database | to write cfg.InstallState |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Pro SQL database | update | cfg.InstallState: Ring, channel, set by | the Pro database | the web app shows the ring | record the previous ring |
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -Ring | no | ||
| -Channel | no | '' | Where updates come from: invardia (Pro), internal (the internal update feed), community (GitHub). Shown with the ring. |
| -ResourceGroupName | no | [string]$global:SI_Bootstrap_ResourceGroupName | |
| -SetBy | no | 'setup' | Who records it (shown in the web app's tooltip). |
| -Server | no | [string]$global:SI_ProSqlServer | |
| -Database | no | [string]$global:SI_ProSqlDatabase | |
| -AppId | no | [string]$global:SI_SPN_AppId | |
| -TenantId | no | [string]$global:SI_SPN_TenantId | |
| -CertThumbprint | no | [string]$global:SI_SPN_CertThumbprint | |
| -Store | no | The database, already open (New-SIProSettingsStore -Invoke ...): a test's fake, or a caller's store. | |
| -PassThru | no |
Preview with -WhatIf
Says which ring would be recorded where; the database is not opened.
Undo
Run it again with the previous ring.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics.io, api.msrc.microsoft.com, api.security.microsoft.com, api.securitycenter.microsoft.com, api.securityplatform.microsoft.com, database.windows.net, entra.microsoft.com, graph.microsoft.com, invardia.com, licenses.nuget.org, login.microsoftonline.com, management.azure.com, monitor.azure.com, nvd.nist.gov, portal.invardia.com, storage.azure.com, vault.azure.net
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/si/Set-SIInstallRing.ps1 -OutFile Set-SIInstallRing.ps1
.\Set-SIInstallRing.ps1To check the download first, compare its SHA-256 with the published one:
SHA-256 61748c3c2fbbcd75cd1942e175b83e4575b481252cd684220d76811a4b707d77
Checksums: SHA256SUMS.txt · Version 3.0.79
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Set-SIInstallRing.ps1 -Full · Source: Set-SIInstallRing.ps1
Every script, identity and permission for your security review: SecurityInsight