ActiveDirectoryCSDsc icon indicating copy to clipboard operation
ActiveDirectoryCSDsc copied to clipboard

AdcsCertificationAuthority fails to install when CACommonName uses a dot

Open alpharedline opened this issue 2 years ago • 0 comments

When using the following configuration, taken from the exemple, and adding some fileds, a bug appears when the $CompanyName contains a dot (.) (ex: "MyCompany S.A."), whereas it does not fail on manual installation or by using the powershell command Install-AdcsCertificationAuthority

The bug consists into not triggering the installation of the CertificationAuthority, and reporting it as already present (when it is not): "Test-TargetResource: ADCS EnterpriseRootCA is installed and should be. Change not required."

After the install the "server manager" requieres to manually perform this install.

Configuration used: $CompanyName = "My Company S. A." AdcsCertificationAuthority CertificateAuthority { IsSingleInstance = 'Yes' Ensure = 'Present' Credential = $DomainCredential CACommonName = "$($CompanyName) Certification Authority" CAType = 'EnterpriseRootCA' ValidityPeriod = 'Years' ValidityPeriodUnits = '7' DependsOn = '[WindowsFeature]ADCS-Cert-Authority' }

alpharedline avatar Feb 10 '23 20:02 alpharedline