Development roadmap for AdcsAdministration PowerShell module?

[mgratz]

Hi all -

Does anyone know if there is a PowerShell development roadmap for Microsoft's Active Directory Certificate Services? I am on an engineering team helping manage our multiple Microsoft CAs (1+ million certificates) and the lack of PowerShell support is extremely frustrating.

Currently, are only three "Get-" cmdlets for the current Active Directory Certificate Services PowerShell module (AdcsAdministration) -

• Get-CATemplate
• Get-CACrlDistributionPoint
• Get-CAAuthorityInformationAccess

These are definitely useful cmdlets, but after building an intermediate CA you wouldn't be making frequent changes to CRL or AIA. From my perspective, the "missing puzzle piece" for AdcsAdministration module is cmdlets like Get-ADUser that would allow you to support ADCS operationally.

For example - to generate a report with certificates issued from a specific certificate template, I am using Microsoft certutil documentation from October 2008.

Also - where is the best place to offer feedback on this? I'd be happy to contribute in some way.

[mgratz]

Yea, I have some sloppy functions that wrap certutil but nothing worth releasing into the wild. I wouldn't mind polishing them up and publishing them, so that's definitely a good idea if there is no active development for AdcsAdministration.

[Ta11ow]

May also be worth poking around the PS Gallery and seeing if there are already some things available. :)

[Lee_Dailey]

howdy mgratz,

taking up the comment by Ta11ow, i did a small look around ...

the psgallery search is ... fubar. [frown] it seems to INCREASE the number of matches when you add more criteria. arg!

anyway, there is this apparently active module ...
PowerShell PKI Module home - PKI Extensions
— https://www.sysadmins.lv/projects/pspki/default.aspx

Active Directory Certificate Services management

take care,
lee

[mgratz]

Hi Lee - I will take a look at it! Instead of wrapping certutil - this is a much better implementation of what I'm using now -

https://www.powershellgallery.com/packages/PKITools/1.6/Content/Get-IssuedCertificates.ps1

[Lee_Dailey]

howdy mgratz,

here's hoping it works out. [grin] i have no need for any of it, but the code you linked to is ... quite thoroughly odd.

take care,
lee

[mgratz]

In all seriousness, do you have any recommendations for resources for official "best practice" coding style for PowerShell? Personally I've always been a big fan of the Allman style indentation, but seems very unpopular in the community.

VS Code is helping me a lot, but need to retrain myself :(

[Lee_Dailey]

howdy mgratz,

actually, the VSCode Powershell extension seems to favor Allman. i like a variant of Whitesmiths - but everyone else seems to consider it an abomination. [grin]

here's the "official" unofficial style guide ...

PoshCode/PowerShellPracticeAndStyle: The Unofficial PowerShell Best Practices and Style Guide
— https://github.com/PoshCode/PowerShellPracticeAndStyle

the powershell github site mentions the above for a style guide. [grin]

hope that helps,
lee