Windows Server
Last updated
Was this helpful?
Last updated
Was this helpful?
You can use the SCEPmanClient PowerShell module to request certificates for your Windows server. Please refer to the main article of the module for the prerequisites:
While the module is capable of initially requesting certificates, it might not be desirable to store the service principal credentials on a machine that could be used to request arbitrary certificates.
So if your scenario includes the deployment of a certificate using Certificate Master you can automatically renew it using SCEPmanClient by providing an already existing certificate for authentication:
This will find certificates expiring in the next month and use it for
If you want to request certificates on your server initially you can do so by supplying a service principal for authentication that has the role CSR DB Requesters assigned. Please refer to the following guide on how to implement such a service principal:
If we now want to renew a certificate we can disregard the service principal and use an already issued certificate for authentication. This will use the existing certificates details to construct a new CSR and issue it to SCEPman for a new certificate.