IIS 7 and Above
how to manage / generate pfx files when using centralized certificate...
Last post Feb 24, 2021 08:44 PM by lextm
Feb 23, 2021 06:39 PM|krustyfied|LINK
So i've been playing around with IIS Centralized certificate management by creating some test certificates using powershell.
Powershell commandlets (Export-pfxcertifcate) usually create a certificate and it's corresponding private key and store it directly to the certificate store. And then you export it as pfx and store it at the central location. And then the certificate "needs"
to be deleted from the store.
But this process seems counterproductive to how centralized certificate management is supposed to work so I'm wondering - how is one supposed to (in an automated fashion)
without involving third party tooling and not relying on certificates being stored in the certificate store.
Feb 24, 2021 09:35 AM|samwu|LINK
how is one supposed to (in an automated fashion)
It seems impossible in an automated fashion, have you tried any?
Feb 24, 2021 08:44 PM|lextm|LINK
without involving third party tooling
A corporation that might rely on CCS feature is probably already on a third party solution or home made system, so your assumption is not really valid.