Administrator Guide

3 Create a PowerShell Credential asset. The password for this asset is used to protect the private keys of the exported certicates.
a In the Windows Azure Pack management portal for administrators, click Automation in the navigation pane.
b On the Automation page, click Assets.
c Click Add Setting, and then click Add Credential.
d In the Credential Type list, click PowerShell Credential.
e In the Name box, type a name for the asset (for example, CertExport), and then click the Next arrow.
f In the User Name box, enter a user name; for example, SMACred. This does not need to be an existing user in the domain, or
have any specic permissions.
g In the Password and Conrm Password boxes, type a password. This password is used to protect the private keys of the
exported certicates.
IMPORTANT: Record this password. If you must restore these certicates in the future, you need this
password.
4 Run the Get-SslCerticate runbook:
a On the Automation page, click Runbooks.
b Search for the Get-SslCerticate runbook.
c With the Get-SslCerticate runbook selected, click Start.
d Specify the following parameters:
Table 38. Get-SslCerticate runbook parameters
Input Parameter Details
ComputerNames Specify the computer names in JSON format, for example:
["< Prex >APA01", "< Prex >-APT01"]
You must include the square brackets and quotation marks.
FileShare The UNC le share that you created in step 1 of this procedure; for example:
\\< Prex >CON01\WAPCerts
PFXCredential The name of the PowerShell Credential asset that you created in step 3; for
example, CertExport.
5 When the runbook nishes, browse the WAPCerts share to make sure there is output.
The Get-SslCerticate runbook populates the le share with a folder tree in which the exported backups of the Personal Information
Exchange File (.pfx) certicates are stored; for example:
134
Security