Host Guardian Service

 Deploy Host Guardian Service on Windows Server 2016 Datacenter Edtion:

Install the role:

Install-WindowsFeature -Name HostGuardianServiceRole -IncludeManagementTools -Restart

Install HGS:

$adminPassword = ConvertTo-SecureString -AsPlainText 'MyPass9018hh!' -Force

Install-HgsServer -HgsDomainName 'maykonrds.local' -SafeModeAdministratorPassword $adminPassword -Restart

Create the certs and initialize the cluster:

$certificatePassword = ConvertTo-SecureString -AsPlainText 'maykon' –Force
$signingCert = New-SelfSignedCertificate -DnsName "signing.maykonrds.local"  
Export-PfxCertificate -Cert $signingCert -Password $certificatePassword -FilePath 'C:\signCert.pfx'

$encryptionCert = New-SelfSignedCertificate -DnsName "encryption.maykonrds.local"
Export-PfxCertificate -Cert $encryptionCert -Password $certificatePassword -FilePath 'C:\encCert.pfx'

Initialize-HgsServer -HgsServiceName 'MyHgsDNN' -SigningCertificatePath 'C:\signCert.pfx' -SigningCertificatePassword $signingCertPass -EncryptionCertificatePath 'C:\encCert.pfx' -EncryptionCertificatePassword $encryptionCertPass -TrustTpm