SSL Certificate management with Powershell DSC

Question

I have a third-party issued certificate that I need to ensure is running on all targets in a given domain. Is there a way to ensure this certificate is installed by way of DSC?

Solution

There is currently no built-in way to do this in DSC. I wrote a custom resource for my organization that installs a certificate from a PFX. I used the Cert: PSDrive, Import-PfxCertificate cmdlet and secured credentials in DSC (for the PFX password).

Update

This is now live in Microsoft's resources! The xPfxImport resource is in the xCertificate module v1.1 (and later presumably).

Also wrote about it on my own blog.

Thanks again for the encouragement (especially jscott).

Comments

[briantist]

@jscott almost a year later, but I'm attempting to get the code added to the xCertificate module in Microsoft's DSC resources, so hopefully it will soon be available as part of what was once the DSC Resource Kit (and would now be available through the PowerShell Gallery). My pull request is waiting here but you can take a look at the code now if you like.

[briantist]

@jscott finally merged into dev, no idea how long it will take to get into master. Thanks for the bounty and your support.