`New-ZPRootPasswordHash`

Creates a ZPH1 password hash for the portal's root account or an internal user.

Syntax

New-ZPRootPasswordHash [-Password <System.Security.SecureString>]

Description

The portal never stores plaintext passwords. This cmdlet produces the string the portal expects in appsettings.json:

"RootUser": { "UserName": "root", "PasswordHash": "ZPH1:..." }

Format: ZPH1::: (PBKDF2-HMAC-SHA256, 100000 iterations, 16-byte salt, 32-byte hash).

The root account is only needed when the portal is used WITHOUT Active Directory, or as a break-glass login. It bypasses all module permissions, and every logon with it is written to the portal log.

Parameters

-Password <System.Security.SecureString>: The password as a SecureString. Omit it to be prompted (recommended - the password then never appears in the console history).

Examples

New-ZPRootPasswordHash
Prompts for the password and prints the hash.

$h = New-ZPRootPasswordHash -Password (Read-Host -AsSecureString)