Administrator Guide

c Click Add Setting, and then click Add Credential.
d In the Credential Type list, click PowerShell Credential.
e In the Name box, type a name for the asset (for example, CertExport), and then click the Next arrow.
f In the User Name box, enter a user name; for example, SMACred. This does not need to be an existing user in the domain, or
have any specic permissions.
g In the Password and Conrm Password boxes, type a password. This password is used to protect the private keys of the
exported certicates.
IMPORTANT: Record this password. If you need to restore these certicates in the future, you will need this
password.
4 Run the Get-SslCerticate runbook.
a On the Automation page, click Runbooks.
b Search for the Get-SslCerticate runbook.
c With the Get-SslCerticate runbook selected, click Start.
d Specify the following parameters.
Table 37. Get-SslCerticate Runbook Parameters
Input Parameter Details
ComputerNames You must specify the computer names in JSON format, for example
["<Prex>APA01" , "<Prex>-APT01"].
FileShare The UNC le share that you created in step 1 of this procedure; for example, \
\< Prex >CON01\WAPCerts.
PFXCredential The name of the PowerShell Credential asset that you created in step 3; for
example, CertExport.
5 When the runbook completes, browse the WAPCerts share to make sure there is output.
The Get-SslCerticate runbook populates the le share with a folder tree in which the exported backups of the Personal Information
Exchange File (.pfx) certicates are stored; for example:
Figure 52. WAPCerts
The root folders for the Windows Azure Pack websites are named MgmtSvc-*, where * is the name of the Windows Azure Pack
service (for example, MgmtSvc-TenantSite).
Security
129