Administrator Guide

Table Of Contents
3 Create a PowerShell Credential asset. The password for this asset is used to protect the private keys of the exported certica
tes.
a In the Windows Azure Pack management portal for administrators, click Automation in the navigation pane.
b On the
Automation page, click Assets.
c Click
Add Setting, and then click Add Credential.
d In the
Credential Type list, click PowerShell Credential.
e In the
Name box, type a name for the asset (for example, CertExport), and then click the Next arrow.
f In the
User Name box, enter a user name; for example, SMACred. This does not need to be an existing user in the domain, or
have any specic permissions.
g In the
Password and Conrm Password boxes, type a password. This password is used to protect the private keys of the
exported certicates.
IMPORTANT
: Record this password. If you must restore these certicates in the future, you need this
password.
4 Run the
Get-SslCerticate runbook:
a On the
Automation page, click Runbooks.
b Search for the Get-SslCerticate runbook.
c With the
Get-SslCerticate runbook selected, click Start.
d Specify the following parameters:
Table 38. Ge
t-SslCerticate runbook parameters
Input Parameter Details
ComputerNames Specify the computer names in JSON format, for example:
["<
Prex
>APA01", "<
Prex
>-APT01"]
You must include the square brackets and quotation marks.
FileShare The UNC le shar
e that you created in step 1 of this procedure; for example:
\\<
Prex
>CON01\WAPCerts
PFXCredential The name of the PowerShell Credential asset that you created in step 3; for
e
xample, CertExport.
5 When the runbook nishes
, browse the WAPCerts share to make sure there is output.
The Get-SslCerticate
runbook populates the le share with a folder tree in which the exported backups of the Personal Information
Exchange File (.pfx) certicates are stored; for example:
134 Security