Skip to content

Commit 1bea369

Browse files
committed
Clarify parameter usage
1 parent cadca1a commit 1bea369

4 files changed

+40
-0
lines changed

docset/winserver2025-ps/smbshare/Get-SmbServerCertificateMapping.md

+10
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,16 @@ Get-SmbServerCertificateMapping [[-Name] <String[]>] [[-Subject] <String[]>]
2828
The `Get-SmbServerCertificateMapping` cmdlet retrieves the certificates associated with the SMB
2929
server for SMB over QUIC. For more information, see [SMB over QUIC](https://aka.ms/smboverquic).
3030

31+
> [!NOTE]
32+
>
33+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
34+
> **SkipClientCertificateAccessCheck** is set to `$false`, the server will perform both client
35+
> certificate validation and access control checks.
36+
>
37+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
38+
> **SkipClientCertificateAccessCheck** is also set to `$true`, the server will perform client
39+
> certificate validation but no access control checks.
40+
3141
## EXAMPLES
3242

3343
### Example 1 - Retrieve the certificate mapped to two SMB over QUIC server names

docset/winserver2025-ps/smbshare/New-SmbServerCertificateMapping.md

+10
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,16 @@ New-SmbServerCertificateMapping [-Name] <String> [-Thumbprint] <String> [-StoreN
2828
The `New-SmbServerCertificateMapping` cmdlet associates a certificate to the SMB server for SMB
2929
over QUIC. For more information, see [SMB over QUIC](https://aka.ms/smboverquic).
3030

31+
> [!NOTE]
32+
>
33+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
34+
> **SkipClientCertificateAccessCheck** is set to `$false`, the server will perform both client
35+
> certificate validation and access control checks.
36+
>
37+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
38+
> **SkipClientCertificateAccessCheck** is also set to `$true`, the server will perform client
39+
> certificate validation but no access control checks.
40+
3141
## EXAMPLES
3242

3343
### Example 1 - Map a certificate located in the local machine's personal store

docset/winserver2025-ps/smbshare/Remove-SmbServerCertificateMapping.md

+10
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,16 @@ The `Remove-SmbServerCertificateMapping` cmdlet removes the certificates associa
4040
server for SMB over QUIC. For more information, review
4141
[SMB over QUIC](/windows-server/storage/file-server/smb-over-quic).
4242

43+
> [!NOTE]
44+
>
45+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
46+
> **SkipClientCertificateAccessCheck** is set to `$false`, the server will perform both client
47+
> certificate validation and access control checks.
48+
>
49+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
50+
> **SkipClientCertificateAccessCheck** is also set to `$true`, the server will perform client
51+
> certificate validation but no access control checks.
52+
4353
## EXAMPLES
4454

4555
### Example 1 - Remove a certificate mapping for SMB server edge endpoint

docset/winserver2025-ps/smbshare/Set-SmbServerCertificateMapping.md

+10
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,16 @@ Set-SmbServerCertificateMapping -InputObject <CimInstance[]> [-Flags <Flags>] [-
3838
The `Set-SmbServerCertificateMapping` cmdlet modifies a certificate's association to the SMB server
3939
for SMB over QUIC. For more information, see [SMB over QUIC](https://aka.ms/smboverquic).
4040

41+
> [!NOTE]
42+
>
43+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
44+
> **SkipClientCertificateAccessCheck** is set to `$false`, the server will perform both client
45+
> certificate validation and access control checks.
46+
>
47+
> - If the **RequireClientAuthentication** parameter is set to `$true` and
48+
> **SkipClientCertificateAccessCheck** is also set to `$true`, the server will perform client
49+
> certificate validation but no access control checks.
50+
4151
## EXAMPLES
4252

4353
### Example 1: Enable Named Pipes for the SMB over QUIC endpoint

0 commit comments

Comments
 (0)