PowerShell
PowerShell copied to clipboard
J0F3
Personal PowerShell Script collection
I've found out, that current code is not compatible with PS7 slightly. Changing `$certbytes | Set-Content -Encoding Byte -Path $pfxPath -ea Stop` to `$certbytes | Set-Content -AsByteStream -Path $pfxPath -ea...
First of all, fantastic script! It really makes certificate tasks so much easier! For those of us who are requesting certs against a template that has the `Issuance Requirements >...
First certificate in the .csv chain executes perfectly. Every fourth certificate in the csv chain executes perfectly. All other entries in the chain fail to submit because they "Certificate Request...
This code uses the legacy provider for requesting keys. While many MS CS services are configured to use this provider one should move to Microsoft Software Key Storage Provider (KSP)...
When using CSV list, `CAName` gets updated with `certreq`'s `-config` argument after first execution, thus any following entries will fail with invalid `CAName` given to the `certreq`. Please add following...
Hi, I'm trying to use the script to generate user certificates. As the script only works in the Machine/Device store I get a popup that context conflicts with user context....
https://github.com/J0F3/PowerShell/blob/71ad3619a08a58cf770fe23f7cfe55b309ac0d53/Request-Certificate.ps1#L406 For some certificates you need the whole chain to be exported (For example VMWare vCenter). I adapted your script and maybe you can add it here. Solution taken from:...
https://github.com/J0F3/PowerShell/blob/71ad3619a08a58cf770fe23f7cfe55b309ac0d53/Request-Certificate.ps1#L424 Change the line 424 to: `[System.IO.File]::WriteAllBytes($pfxPath, $certbytes)` Reason: At Least in Powershell 7 the parameter Encoding Byte is not Available as parameter of Set-Content. Use the System.IO.File Class directly....
https://github.com/J0F3/PowerShell/blob/71ad3619a08a58cf770fe23f7cfe55b309ac0d53/Request-Certificate.ps1#L366 in order to get the newest CA (in case of a CA which is older but alphabetically before the new CA) change this line (366) to: ``` if($CAs.Count -ge...
Added an additional parameter to specify IP addresses as SAN extension for the certificate. (IPv4)
