Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Misc Newsgroups > PowerShell

Vista - Managing issued certificates on a Certificate Authority

Reply
 
Old 05-21-2009   #1 (permalink)
mhbarton


 
 

Managing issued certificates on a Certificate Authority

I'd like to manage issued certificates that reside on my Certificate
Authority. For instance, I would like to write a script to get the
expiration date of certs that have been issued.

Can someone point me in the right direction to do this from Powershell?
I've looked at the cert provider but I'm not sure this is what I need.

Thanks

My System SpecsSystem Spec
Old 05-21-2009   #2 (permalink)
Bob Landau


 
 

RE: Managing issued certificates on a Certificate Authority

I thought I had at least a bit of certificate knowledge but I don't
understand how you can find out one that's not been issued.

This very well make perfect sense but not to my poor head. Hopefully someone
with more experience can explain that part; about all I can think about is
looking at the date which the certificate takes effect is that what you want?
If so look at GetEffectiveDateString().

Here is a one liner that will get you the dates these certificates expire
along with the thumbprint.

Add -Recurse to have it iterate through the certificate store.
Hopefully this is obvious that you've already move to the location of
interest in the store i.e. cd cert:\currentuser\My

## must already be within the certificate store to execute this.
gci | % {$_.Thumbprint; $_.GetExpirationDateString()}


bob

"mhbarton" wrote:
Quote:

> I'd like to manage issued certificates that reside on my Certificate
> Authority. For instance, I would like to write a script to get the
> expiration date of certs that have been issued.
>
> Can someone point me in the right direction to do this from Powershell?
> I've looked at the cert provider but I'm not sure this is what I need.
>
> Thanks
My System SpecsSystem Spec
Old 05-22-2009   #3 (permalink)
Vadims Podans [MVP]


 
 

Re: Managing issued certificates on a Certificate Authority

Hi, Bob! IIUC, mhbarton ask for certificate management on Certification
Authority (not local certificate store). On CA you can find folowing
sections:
Revoked Certificates
Issued Certificates
Pending Request
Failed Requests.

(in last two sections you can find certificates, that never haven't issued)
PowerShell doesn't provide native support for this (may be here is .NET
support). AndI recomend to see to certutil.exe utility.
--
WBR, Vadims Podans
MVP: PowerShell
PowerShell blog - www.sysadmins.lv

"Bob Landau" <BobLandau@xxxxxx> rakstīja ziņojumā
"news:FDFF5CF5-D0CE-4338-9D85-54ADFAC6C6FD@xxxxxx"...
Quote:

> I thought I had at least a bit of certificate knowledge but I don't
> understand how you can find out one that's not been issued.
>
> This very well make perfect sense but not to my poor head. Hopefully
> someone
> with more experience can explain that part; about all I can think about is
> looking at the date which the certificate takes effect is that what you
> want?
> If so look at GetEffectiveDateString().
>
> Here is a one liner that will get you the dates these certificates expire
> along with the thumbprint.
>
> Add -Recurse to have it iterate through the certificate store.
> Hopefully this is obvious that you've already move to the location of
> interest in the store i.e. cd cert:\currentuser\My
>
> ## must already be within the certificate store to execute this.
> gci | % {$_.Thumbprint; $_.GetExpirationDateString()}
>
>
> bob
>
> "mhbarton" wrote:
>
Quote:

>> I'd like to manage issued certificates that reside on my Certificate
>> Authority. For instance, I would like to write a script to get the
>> expiration date of certs that have been issued.
>>
>> Can someone point me in the right direction to do this from Powershell?
>> I've looked at the cert provider but I'm not sure this is what I need.
>>
>> Thanks
My System SpecsSystem Spec
Old 07-09-2009   #4 (permalink)
djangofan


 
 

Re: Managing issued certificates on a Certificate Authority

I was playing around with this stuff and I wrote a DOS script (with
lots of bugs it in) that manages certs for me. You might be able to
use my script as a basis for writing a Powershell script that does the
same kind of stuff:

http://workaround.org/articles/ispma...figure-dovecot
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
need to restore an IE certificate from a ghost backup or restore all certificates Vista security
"Request New Certificate" is missed from Certificates snap-in Vista security
Signing Powershell Scripts with Microsoft Certificate Authority PowerShell
Vista IE7-922706- no certificate appeared in Certificates dialog box Vista security
Adding certificate to trusted root authority Vista security


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46