PSPKI
PSPKI copied to clipboard
PKISolutions
PowerShell PKI Module
Hi I have something similar to https://github.com/PKISolutions/PSPKI/issues/111: With Get-CertificationAuthority, I got a "The given path's format is not supported." Error (UNC Path): ``` PS C:\windows\system32> Import-module -Name PSPKI -Prefix PSPKI...
Hi Folks. Small bug report I think: The `Add-CertificateTemplateAcl` parameter `AcessRule` should be spelt `AccessRule` (version 3.7.2) Cheers.
Problem line: https://github.com/PKISolutions/pkix.net/blob/b0452cf8edcdbeae6f717da0d94bc4ee83b7c83b/PKI/Security/AccessControl/CertTemplateSecurityDescriptor.cs#L205 There should be `ActiveDirectoryRights.ReadProperty | ActiveDirectoryRights.WriteProperty | ActiveDirectoryRights.ExtendedRight`
The issue is on this line: https://github.com/PKISolutions/pkix.net/blob/b0452cf8edcdbeae6f717da0d94bc4ee83b7c83b/PKI/Security/AccessControl/CertTemplateSecurityDescriptor.cs#L210 Compare must be done against Autoenroll, not Enroll.
V1 templates allow only these permissions: -Full Control - Read - Write - Enroll Currently, we do not check for template version and can enable Autoenroll right on V1 template,...
The following command runs fine with PSPKI v3.5: `Get-CertificateTemplate -Name WebServer | Get-CertificateTemplate | Add-CertificateTemplateAcl -User user1 -AccessType Allow -AccessMask Read, Enroll | Set-CertificateTemplateAcl` The equivalent command has no effect...
Does anyone have any ideas on this? I'm submitting my csr to a standalone PKI server domain joined and I am not using a template. This works just fine: certreq...
Dear Team, I'm working with PSPKI v3.7.2 and i was trying to redirect the debug output of Get-EnterprisePKIHealthStatus to a txt file using this commands: # Create a brief Status...
PSversion: 5.1.14393.0 PSPKIversion: 3.7.2 Dear PSPKI team, i've set up a CA Template with CT_FLAG_SUBJECT_ALT_REQUIRE_SPN enabled. When i run Get-CertificateTemplate it doesn't display a "normalized" Value on Settings->SubjectName like e.g...
The type extension in PSPKI.PS5Types.ps1xml for Get-AuthenticodeSignature does not return SigningTime for some files signed using authenticode. ``` PS C:\Users\Patrick.SCZEPANSKI> Get-AuthenticodeSignature "C:\Temp\tphkcoinst.dll" | Select SigningTime, Status, SignatureType, IsOSBinary SigningTime Status...
