Skip to content

Instantly share code, notes, and snippets.

@jimdiroffii

jimdiroffii/generateclientcert.ps1

Last active January 4, 2021 21:57
Show Gist options
  • Save jimdiroffii/e4d4383e27dcb4c178b38324112677b7 to your computer and use it in GitHub Desktop.
Save jimdiroffii/e4d4383e27dcb4c178b38324112677b7 to your computer and use it in GitHub Desktop.
Download ZIP
Azure Powershell - Generate root and client certificates
Raw
generateclientcert.ps1
# With previous session from root generation still open
New-SelfSignedCertificate -Type Custom -DnsName <clientcertificatename> -KeySpec Signature `
-Subject "CN=<clientcertificatename>" -KeyExportPolicy Exportable `
-HashAlgorithm sha256 -KeyLength 4096 `
-CertStoreLocation "Cert:\CurrentUser\My" `
-Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")
Raw
generaterootcert.ps1
$cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature `
-Subject "CN=<rootcertificatename>" -KeyExportPolicy Exportable `
-HashAlgorithm sha256 -KeyLength 4096 `
-CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign
# Leave session open to run client cert script
@jimdiroffii
Copy link
Author

Scripts modified from originals: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment