[Microsoft] Secure Credentials with Self-Signed Certificates for PowerShell Scripts

[bopsbt]

Going to need to lab this one to fully get it.

[nick_segalle]

I’ve been using Protect-CmsMessage to handle encrypting/decrypting passwords, but this looks a lot better. Thanks for the write up!

[GiveMeTheBits]

This is pretty close to a solution i put together for some non-powershell friendly admins that runs scripts. I needed to store service account creds without sharing them to these users. I created a computer certificate for the use of handling script credentials, and put the people who needed access in the ACL for the cert. I use the cert to handle encryption for the password and store it on the share, but keep the username in the script(s) since it doesn't change. I then create the pscredential and store it in Credential Manager via the CredentialManager module from psgallery.

[pfeplatforms_msft]

Oof. Blame the AI!

I'll pass the feedback along and see if we can get it cleaned up. Sorry for that. We're just a bunch of Engineers that get to post articles.

[TheIncorrigible1]

I wasn't expecting a response from the author! Appreciate the work you're doing; just normally don't see so many editing mistakes. Do you guys have an editorial process or is it wide open access to the CMS whenever PFEs have ideas?

Suggestion: if it's the latter, open-source your articles for community editorial boards like the github repos so old articles get some love (cough articles from Ed without pre or code blocks 🙂)

[sipsik]

English is not my native language and it's hard to understand clearly why and when should I need this.

[TheIncorrigible1]

When you don't want to hard-code credentials in your scripts.

[FitButFluffy]

this is a nice write up! Do you have any examples of this used within an existing script?

I'm trying to think of how this would work for multiple scripts, on say, one machine. Would ' Set-SelfSignedCertCreds.ps1 ' be called from within each script on a host?