Closed Unassigned: Get-ObjectIdentifierEx fails when OID group is not...
Get-ObjectIdentifierEx fails when OID group is not specified, because dwOidGroup is casted to Int32, instead of UInt32:```Cannot convert argument "dwGroupId", with value: "-2147483647", for...
View ArticleClosed Unassigned: OID Problems with Certificate Templates [41]
Hi,I've found two issues related to OIDs / certificate templates - I'm working on Windows Server 2012.__The first issue was with registering OIDs.___The following command reports...
View ArticleClosed Unassigned: Certificate template support is broken when running on...
Get-CATemplate and Get-CertificateTemplate are broken and doesn't work on Windows XP and Windows Server 2003.The issue is caused because of an issue when calling CryptEncodeObject unmanaged...
View ArticleClosed Unassigned: Add Subject Alternate Names to Cert Request [39]
**Camelot wrote:**> Ok, if you are aware about these risks, then the following syntax must be used:> ```> Submit-CertificateRequest <parameters> -Attribute...
View ArticleClosed Unassigned: Start-PsFCIV throws error with .NET 2.0 [38]
Method invocation failed because [System.Security.Cryptography.SHA1CryptoServiceProvider] doesn't contain a method named 'Dispose'.At C:\Users\multifront-build\Desktop\PsFCIV_2.1.ps1:241 char:18+...
View ArticleClosed Unassigned: Start-PsFCIV time zone issue [37]
Start-PsFCIV incorrectly mark files as "Bad" when XML datafile was created and checked on different machines with different time zone settings.Comments: Fixed in 2.8
View ArticleClosed Feature: Submit-CertificateRequest and Receive-Certificate should...
Submit-CertificateRequest and Receive-Certificate should support CEP endpoints.Comments: Fixed in 2.8
View ArticleNew Post: Get Pending Requests with SAN / DNS
How would you use Get-PendingRequest and also pull the request extensions so I can get Subject Alternative Names / DNS extensions?
View ArticleNew Post: Get Pending Requests with SAN / DNS
Sorry for delayed response. The only way is to get raw request ("Request.RawRequest" property) and use it to instantiate a X509CertificateRequest class...
View ArticleNew Post: Feature Request - Certificate Reporting
Hi Camelot, Would it be possible to incorporate into PSPKI some kind of "easier capability" for generating reports on certificates? I might want to report on:List of certificates issued based upon...
View ArticleNew Post: Feature Request - Certificate Reporting
I'm not sure what do you mean under "easier capability", but certain things definitely are possible. CA database reporting is very wide question a lot of people have different requirements, so there...
View ArticleNew Post: Feature Request - Certificate Reporting
I checked it again, apparently there is a workaround to retrieve only archived rows: Get-CA ca01* | Get-IssuedRequest -Filter "Request.KeyRecoveryHashes -ge "Request.KeyRecoveryHashes column will...
View ArticleNew Post: Exclude autoenroll certificates
I know you can check the enrollment flags using CertUtil, and then filter out "0x20" (or CT_FLAG_AUTO_ENROLLMENT) ... is there not some way to update the PSPKI modele to explose more of the certifcate...
View ArticleNew Post: Feature Request - Certificate Reporting
Hi Camelot, Thanks for all the feedback. Why can't you just create an IOS / Android App which will use voice input for me to specify a set of complex custom criteria for a report, deliver the output...
View ArticleNew Post: Exclude autoenroll certificates
you can include EnrollmentFlags column in the view and then use Where-Object to filter autoenrolled certs: Get-CA ca01* | Get-IssuedRequest -Property EnrollmentFlags | where {$_-band...
View ArticleNew Post: Exclude autoenroll certificates
Thanks for that. And I presume, to exclude those auto-enrolled certificates, we would use the -bnot operator ? However, when I use that, PS carps that the token ( -bnot ) is unexpected.
View ArticleNew Post: Exclude autoenroll certificates
Nope: Get-CA ca01* | Get-IssuedRequest -Property EnrollmentFlags | where {($_-band 0x20) -eq 0}or: Get-CA ca01* | Get-IssuedRequest -Property EnrollmentFlags | where {!($_-band 0x20)}
View ArticleNew Post: Get-PendingRequest Additional Properties
I'm sure that I need to do something very simple to make this work, but I can't figure it out. If I use the Get-PendingRequest cmdlet and use -Property to add Request.RequestAttributes to the object...
View ArticleNew Post: Get-PendingRequest Additional Properties
put property name in quotes:$attribs=$varRequests."Request.RequestAttributes"
View ArticleNew Post: Get-PendingRequest Additional Properties
Duh. I knew it was something simple. Thanks a lot!
View Article