• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 925
  • Last Modified:

Add a certificate to IIS global "Server Certificates" list using PowerShell?

Hi,

Been surfing the web for an example on how to add a certificate to the "global" IIS "Server Certificates" list using PowerShell but to no luck. I already have code in place on how to tie / associate a specific website with a specific cert but not how to add the new .cer file using the "Complete Certificate Request..." wizard using PowerShell.... I dont expect the final code to become published but if someone had an idea on how to integrate / get an entry point on where to interact between the "Server Certificate" list in IIS and POSH I would be super happy! :|
 
I am runnign IIS on a Windows 2008R2 x64 Standard Edition if that helps..... of course, I would settle for an CLI if there is no other way, but POSH is of course the way to go! :)
 
Thanks for the help in advance guys, take care!
0
Kandium
Asked:
Kandium
  • 5
  • 3
1 Solution
 
Meir RivkinFull stack Software EngineerCommented:
0
 
Meir RivkinFull stack Software EngineerCommented:
please check jgovednik post here:

http://forums.iis.net/t/1172382.aspx
0
 
KandiumAuthor Commented:
We are wanting to add a *.cer file and not a *.pfx file, but yes... the function below does work with a pfx file.

function Add-SSLCertificate{
param([string]$pfxPath,[string]$pfxPassword,[string]$hostHeader,[string]$siteName)

$certMgr = New-Object -ComObject IIS.CertObj -ErrorAction SilentlyContinue 
$certMgr.ImportToCertStore($pfxPath,$pfxPassword,$true,$true)

Import-Module WebAdministration;
New-WebBinding -Name $siteName -Port 443 -Protocol https -HostHeader $hostHeader 
}

Open in new window


Also - Yes, we have explored the IIS PowerShell Snap-in and could not find anything to work natively.

Thanks!
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
Meir RivkinFull stack Software EngineerCommented:
what i'd is convert *.pfx to *.cer format either by certificate manager in Windows Management Console or using pvkimprt tool:
http://www.microsoft.com/download/en/details.aspx?displaylang=EN&id=6563
and then using the powershell script above.

also check the following link:
http://www.ehow.com/how_8586664_convert-cer-pfx.html
0
 
Meir RivkinFull stack Software EngineerCommented:
hi,

did u get any progress with your issue?
do u need any further help?

cheers
0
 
KandiumAuthor Commented:
Hey,

The tool specified "pvkimprt" does not exist in Windows Server 2008R2 and doing it graphically isn't a solution we are looking for, we need this to be done all through scripting.

We are now also talking to Microsoft for a solution for this one as well and the question has been escalated.

Thanks again!
0
 
Meir RivkinFull stack Software EngineerCommented:
well, i used this tool in server2008R2, you can download it from here http://www.microsoft.com/download/en/details.aspx?id=6563
also check this post which describes how to create Code Signing Certificate on Windows Server 2008 with OpenSSL and pvkimprt.
http://blog.webactivedirectory.com/create-a-code-signing-certificate-on-windows-server-2008-with-openssl-and-pvkimprt/

>>doing it graphically isn't a solution we are looking for
what do u mean?

you can have the powershell script run the pvkimprt and passing required parameters in command line, make the conversion and running the rest of the script. so basically you got it all in a single PS script.
0
 
KandiumAuthor Commented:
Thanks segwick, that solution will work and we will use it since we have not heard back from MS
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now