{
    "properties": {
        "displayName": "Audit Windows VMs that do not contain the specified certificates in Trusted Root",
        "policyType": "BuiltIn",
        "description": "This initiative deploys the policy requirements and audits Windows VMs that do not contain the specified certificates in the Trusted Root Certification Authorities certificate store (Cert:\\LocalMachine\\Root). For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
        "metadata": {
            "version": "1.0.0-deprecated",
            "category": "Guest Configuration",
            "deprecated": true
        },
        "parameters": {
            "CertificateThumbprints": {
                "type": "string",
                "metadata": {
                    "displayName": "Certificate thumbprints",
                    "description": "A semicolon-separated list of certificate thumbprints that should exist under the Trusted Root certificate store (Cert:\\LocalMachine\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"
                }
            }
        },
        "policyDefinitions": [
            {
                "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5",
                "policyDefinitionReferenceId": "Deploy_WindowsCertificateInTrustedRoot",
                "parameters": {
                    "CertificateThumbprints": {
                        "value": "[parameters('CertificateThumbprints')]"
                    }
                }
            },
            {
                "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f",
                "policyDefinitionReferenceId": "Audit_WindowsCertificateInTrustedRoot"
            }
        ]
    },
    "id": "/providers/Microsoft.Authorization/policySetDefinitions/cdfcc6ff-945e-4bc6-857e-056cbc511e0c",
    "name": "cdfcc6ff-945e-4bc6-857e-056cbc511e0c"
}