Disable-ZrStoreTls
Clears the TLS policy from a store on every connected manager so its nodes fall back to plaintext transport, optionally rolling-restarting them so the change applies immediately.
Syntax
Disable-ZrStoreTls
-Store <string>
[-Restart]
[-Managers <string[]>] [-Port <int>] [-Token <string>] [-TimeoutSec <int>]
[-WhatIf] [-Confirm]
Description
Disable-ZrStoreTls removes the transport-TLS policy from the named store on every connected manager, so its nodes revert to plaintext transport. Pass -Restart to roll the store's nodes so the change takes effect immediately; otherwise it applies on the next restart. Requires an active workspace or an explicit -Managers list.
Disabling TLS drops the store's nodes back to unencrypted transport. Traffic to and between those nodes is no longer encrypted or certificate-authenticated once the change is applied. Do not run this on a production store unless you intend to remove transport protection.
See TLS encryption for the transport security model.
Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
-Store | string | Yes | Name of the store to disable transport TLS on. Position 0. |
-Restart | switch | No | Rolling-restarts the store's nodes so the disabled TLS policy applies immediately instead of on the next restart. |
-Managers | string[] | No | Management Service endpoints to target; when omitted the active workspace's managers are used. |
-Port | int | No | Management Service port for bare-host managers. Default 7801. |
-Token | string | No | Admin bearer token for authenticated control-plane calls. |
-TimeoutSec | int | No | Per-request timeout in seconds. Default 30. |
Supports -WhatIf and -Confirm.
Examples
Turn off transport TLS on the orders store and restart its nodes to apply the change.
Disable-ZrStoreTls -Store orders -Restart