Windows Server
Applicable to SCEPman version 2.9 and above
The cmdlet Update-CertificateViaEST (contained in the SCEPman powershell module) locates certificates issued by SCEPman in either the user or machine certificate stores and renews them using mTLS. Note that this cmdlet (unlike other parts of the powershell module) can only be used on Windows devices.
Parameters
This cmdlet has two parameter sets, Direct, which allows you to pass in a certificate directly and renew it, and Search which searches the My store for SCEPman issued certificates and renews them. The parameters included in these sets are detailed below:
Direct
-AppServiceUrl
Yes
The URL of your SCEPman app service.
-Certificate
No
Certificate object that is to be renewed
Example command:
Search
-AppServiceUrl
Yes
The URL of your SCEPman app service.
-User or -Machine
No
Specifies whether you would like to renew certificates from the user or machine store. One of these must be specified. (note that to edit the machine store you must run the command as admin).
-FilterString
Yes
Will only renew certificates whose Subject field contains the filter string.
-ValidityThresholdDays
Yes
Will only renew certificates that are within this number of days of expiry (default value is 30).
-AllowInvalid
Yes
If specified, the cmdlet will also renew invalid (expired) certificates.
Example command:
Last updated