Using Azure Automation and creating an X509Certificate2 object from a certificate

Question

I am attempting to use a certificate that I have loaded into my automation account to authenticate with Google Sheets API via a service account. This is being done in a PowerShell runbook. The certificate is being retrieved with this command: ``

$cert = (Get-AutomationCertificate -Name 'service-account-cert')

Once I have the certificate, I am attempting to create an instance of X509Certificate2 using the following command:
`

New-Object System.Security.Cryptography.X509Certificates.X509Certificate2($cert, $cert_pswd,[System.Security.Cryptography.X509Certificates.X509KeyStorageFlags]::Exportable )

This script 'works' locally, but fails in azure automation. My hypothesis is the reason for the failure is because 'locally' my cert is represented by a filepath "C:/cert_file_path.pfx". In the sandbox environment, however, Azure seems to be representing the cert itself, which could lead to this error? How do I declare an X509Certificate2 object in an azure automation sandbox environment using a 'shared credential' from the automation account?

Answer 1

Hi there, It seems you need to temporary store the certificate by using the following recommendation https://learn.microsoft.com/en-us/azure/automation/automation-runbook-execution#temporary-storage-in-a-sandbox