Sample Exchange

 View Only

Get-VCSACerts.ps1 

Sep 03, 2020 12:51 PM

    .NOTES

        Author: Mark McGill, VMware

        Last Edit: 5/6/2022

        Version 1.4

    .SYNOPSIS

        Returns vCenter certificate information for all VCSA certificates, and optionally returns host certs

    .DESCRIPTION

        Returns valid from and valid to dates for all VCSA certificates, including STS Signing Certs.

        See https://kb.vmware.com/s/article/79248

        vCenter and user are required. If no password is specified, you will be prompted for one

        USER MUST BE A VCENTER LOCAL USER (ie, administrator@vsphere.local), AND MUST BE IN SPN FORMAT (ie, user@domain.com)

    .PARAMETER vcenters

        REQUIRED

        A single vCenter or array of vCenters to query

    .PARAMETER user

        REQUIRED

        vSphere local domain user in SPN format (ie, administrator@vsphere.local). Local user is needed in order to query LDAP

    .PARAMETER password

        If you do not specify a password when calling the function, you will be prompted for it

    .PARAMETER includeHosts

        Using this flag will retrieve certs from each host associated with the vCenter(s)

    .PARAMETER all

        Using this flag will return "STSRelyingParty" and "STSTenantTrustedCertificateChain" certificates, which are normally duplicates of already

            reported certificates

    .EXAMPLE

        #load function and run

        . ./Get-VCSACerts.ps1

        Get-STSCerts -vcenter "vcenter.domain.com" -user "administrator@vsphere.local" -password 'VMware1!'

    .EXAMPLE

        #uses an array to pass multiple vcenters to the function

        $vCenters = "vCenter1.domain.com","vcenter2.domain.com","vCenter3.domain.com"

        $vCenters | Get-VCSACerts -user "administrator@vsphere.local" -password 'VMware1!'

    .EXAMPLE

        #use the '-includeHosts' option to get all host certificates

        Get-VCSACerts -vcenter "vcenter.domain.com" -user "administrator@vsphere.local" -includeHosts

    .EXAMPLE

        #use the '-all' option to include "STSRelyingParty" and "STSTenantTrustedCertificateChain" certificates

        Get-VCSACerts -vcenter "vcenter.domain.com" -user "administrator@vsphere.local" -all

    .EXAMPLE

        #use the '-Verbose' option to show connection and retrieval details

            Get-VCSACerts -vcenter "vcenter.domain.com" -user "administrator@vsphere.local" -Verbose

    .OUTPUTS

        Array of objects containing certificate data


#Apache2.0
#CertificateMonitoring
#PowerShell
#vSphere
#vSphere
#VcenterServer
#vSphereAPI

Statistics
0 Favorited
0 Views
1 Files
0 Shares
0 Downloads
Attachment(s)
ps1 file
snippet.ps1   13 KB   1 version
Uploaded - Apr 09, 2024

Tags and Keywords

Comments

Jan 28, 2022 09:16 PM

Great script.
Just a pity I only discovered this now :-)

Related Entries and Links

No Related Resource entered.