The update command must be called with at least one of the following parameters: -TokenCert, -SigningCert, -GetDefaultCertificate. ...