Public Key Infrastructure PowerShell module

Project Description
This module is intended to simplify certain PKI management tasks by using automation with Windows PowerShell.

This module is intended for Certification Authority management. For local certificate store management you should consider to use Quest AD PKI cmdlets.

Module Requirements

• Windows PowerShell 2.0

This module can run on any of the specified operating system:

• Windows Server 2003/2003 R2/2008*/2008 R2/2012
• Windows XP**/Vista***/7***

* — Server Core installation is not supported.
** — with installed AdminPack
*** — with installed RSAT (Remote System Administration Tools)

Certification Authority requirements
This module supports Enterprise or Standalone Certification Authority servers that are running one the following operating system:

• Windows Server 2003/2003 R2/2008 (including Server Core)/2008 R2 (including Server Core)/2012 (including Server Core)

Command list:
Full command list for the latest release:

• Add-AuthorityInformationAccess (Alias: Add-AIA)
• Add-CAKRACertificate
• Add-CATemplate
• Add-CertificateEnrollmentPolicyService (Alias: Add-CEP)
• Add-CertificateEnrollmentService (Alias: Add-CES)
• Add-CertificateTemplateAcl
• Add-CRLDistributionPoint (Alias: Add-CDP)
• Add-ExtensionList
• Approve-CertificateRequest
• Connect-CertificationAuthority (Alias: Connect-CA)
• Deny-CertificateRequest
• Disable-CertificateRevocationListFlag (Alias: Disable-CRLFlag)
• Disable-InterfaceFlag
• Disable-KeyRecoveryAgentFlag (Alias: Disable-KRAFlag)
• Disable-PolicyModuleFlag
• Enable-CertificateRevocationListFlag (Alias: Enable-CRLFlag)
• Enable-InterfaceFlag
• Enable-KeyRecoveryAgentFlag (Alias: Enable-KRAFlag)
• Enable-PolicyModuleFlag
• Get-ADKRACertificate
• Get-AuthorityInformationAccess (Alias: Get-AIA)
• Get-CAExchangeCertificate
• Get-CAKRACertificate
• Get-CASchema
• Get-CATemplate
• Get-CertificateRevocationList (Alias: Get-CRL)
• Get-CertificateRevocationListFlag (Alias: Get-CRLFlag)
• Get-CertificateTemplate
• Get-CertificateTemplateAcl
• Get-CertificateTrustList (Alias: Get-CTL)
• Get-CertificateValidityPeriod
• Get-CertificationAuthority (Alias: Get-CA)
• Get-CryptographicServiceProvider (Alias: Get-Csp)
• Get-CryptographicServiceProviderCNG (Alias: Get-CspCNG)
• Get-CRLDistributionPoint (Alias: Get-CDP)
• Get-CRLValidityPeriod
• Get-EnrollmentServiceUri
• Get-ErrorMessage
• Get-ExtensionList
• Get-FailedRequest
• Get-InterfaceFlag
• Get-IssuedRequest
• Get-KeyRecoveryAgentFlag (Alias: Get-KRAFlag)
• Get-ObjectIdentifier
• Get-ObjectIdentifierEx
• Get-PendingRequest
• Get-PolicyModuleFlag
• Get-RevokedRequest
• Import-LostCertificate
• Install-CertificationAuthority (Alias: Install-CA)
• Publish-CRL
• Receive-Certificate
• Register-ObjectIdentifier
• Remove-AuthorityInformationAccess (Alias: Remove-AIA)
• Remove-CAKRACertificate
• Remove-CATemplate
• Remove-CertificateEnrollmentPolicyService (Alias: Remove-CEP)
• Remove-CertificateEnrollmentService (Alias: Remove-CES)
• Remove-CertificateTemplate
• Remove-CertificateTemplateAcl
• Remove-CRLDistributionPoint (Alias: Remove-CDP)
• Remove-ExtensionList
• Remove-Request
• Restart-CertificationAuthority
• Restore-CertificateRevocationListFlagDefault (Alias: Restore-CRLFlagDefault)
• Restore-InterfaceFlagDefault
• Restore-KeyRecoveryAgentFlagDefault (Alias: Restore-KRAFlagDefault)
• Restore-PolicyModuleFlagDefault
• Revoke-Certificate
• Set-AuthorityInformationAccess (Alias: Set-AIA)
• Set-CAKRACertificate
• Set-CATemplate
• Set-CertificateTemplateAcl
• Set-CertificateValidityPeriod
• Set-CRLDistributionPoint (Alias: Set-CDP)
• Set-CRLValidityPeriod
• Set-ExtensionList
• Show-Certificate
• Show-CertificateRevocationList (Alias: Show-CRL)
• Show-CertificateTrustList (Alias: Show-CTL)
• Start-CertificationAuthority
• Stop-CertificationAuthority
• Submit-CertificateRequest
• Test-WebServerSSL
• Uninstall-CertificationAuthority (Alias: Uninstall-CA)
• Unregister-ObjectIdentifier

The following technologies and products were used to design this module: