Set-SILicense
Install a SecurityInsight Pro licence
Purpose
Installs a SecurityInsight Pro licence file into the SecurityInsight Key Vault (secret SI-License), after checking it is for this tenant.
When to run it
When Invardia sends a licence file by hand (normally the licence is requested and installed automatically).
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| azureRbac | Key Vault Secrets Officer | the SecurityInsight Key Vault | to write the secret |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Key Vault secret | update | SI-License | the SecurityInsight Key Vault | the install reads its licence here | set the previous version of the secret back |
What it only reads
- the licence file
- the vault
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -Path | yes | The licence file you received (.silicense / .aitlicense). | |
| -VaultName | no | Override the vault. Normally resolved from config\SecurityInsight.custom.ps1. | |
| -TenantId | no | The tenant this install runs in, for the tenant-binding check. Default: the tenant of the signed-in account. |
Preview with -WhatIf
Checks the licence and shows where it would be written; nothing is written.
Undo
Restore the previous version of the secret SI-License.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics.io, api.msrc.microsoft.com, api.security.microsoft.com, api.securitycenter.microsoft.com, api.securityplatform.microsoft.com, database.windows.net, entra.microsoft.com, graph.microsoft.com, invardia.com, licenses.nuget.org, login.microsoftonline.com, management.azure.com, monitor.azure.com, nvd.nist.gov, outlook.office.com, outlook.office365.com, portal.invardia.com, storage.azure.com, vault.azure.net
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/si/Set-SILicense.ps1 -OutFile Set-SILicense.ps1
.\Set-SILicense.ps1 -Path <Path>To check the download first, compare its SHA-256 with the published one:
SHA-256 32a3318e9477c2af9d431f4328351d49ac36e8947895a154974a778b9aa2ffa9
Checksums: SHA256SUMS.txt · Version 3.0.79
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Set-SILicense.ps1 -Full · Source: Set-SILicense.ps1
Every script, identity and permission for your security review: SecurityInsight