Limits and safety notes

Some tasks are deliberately left to the user interface, and some commands cannot be undone:

• Settings are read-only. Get-TLSPilotConfig returns the whole configuration document. However, you change tenants, alert channels, roles and ACME providers in the Desktop Admin console or the WebUI, see chapter RBAC, chapter Tenants and chapter Alerts and Logging.
• There is no restore command. Restoring a backup runs as a wizard with a preview, see chapter Restore.
• Four commands have no -WhatIf: Start-TLSPilotCycle, which acts on the whole host, Set-TLSPilotCertificate, Invoke-TLSPilotLicenseCheck and Unlock-TLSPilotLicense. The export commands write their file without -WhatIf.
• A license key can only be used once. Unlock-TLSPilotLicense consumes the key and binds this host. Redeem-TLSPilotLicense is an alias of Unlock-TLSPilotLicense.
• Revocation and deletion are final. A revocation at the CA cannot be undone. Removing a certificate or a deployment does not remove the certificate from the target it was installed on.