Get-ZrSecurityStatus
Reports the security enforcement status of each connected manager — whether enforcement is enabled, whether security has been initialized, and the token issuer.
Syntax
Get-ZrSecurityStatus
[-Managers <string[]>] [-Port <int>] [-Token <string>] [-TimeoutSec <int>]
Description
Get-ZrSecurityStatus queries every resolved manager and emits a SecurityStatus object per manager showing Enabled (is enforcement on), Initialized (has security been provisioned), and Issuer (the token issuer identity). Use it to confirm cluster state after Initialize-ZrSecurity, Enable-ZrSecurity, or Disable-ZrSecurity, and to verify a working admin token before toggling enforcement. Requires an active workspace or an explicit -Managers list.
Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
-Managers | string[] | No | Management Service endpoints (host, host:port, or URL) to target. When omitted, the active workspace's managers are used. |
-Port | int | No | Management Service port for bare-host managers. Default 7801. |
-Token | string | No | Admin bearer token for authenticated control-plane calls. |
-TimeoutSec | int | No | Per-request timeout in seconds. Default 30. |
Examples
Show the enabled, initialized, and issuer state for each manager in the cluster.
Get-ZrSecurityStatus