iis - ssl certificate replace with powershell

Question

iis - ssl certificate replace with powershell

mc se 1

Hello everybody.
I have this situation:
IIS with many sites with an SSL certificate associated with it (OLDcertificate.pfx)

I have this goal:
exchange the SSL certificate associated on multiple sites in IIS (with the new NEWcertificate.pfx)

I would kindly ask if anyone can help me locate the commands to do this task with powershell.

At the moment I am trying with these commands:

Get-WebBinding
Get-ChildItem -Path Cert: LocalMachine \ MY
$ OLDCertificateThumbprint = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
$ NEWCertificateThumbprint = "yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy"
Get-WebBinding | Where-Object {$ _. CertificateHash -eq $ OLDCertificateThumbprint} | ForEach-Object {Write-Host "Working on" $ _ $ _. RemoveSslCertificate () $ _. AddSslCertificate ($ NEWCertificateThumbprint, 'My')}

but it does not work.

thanks !

Bruce Zhang-MSFT 3,766 Reputation points

2022-04-14T02:27:35.607+00:00
Hi @mc se ,

but it does not work.

Is there any error message reported? If it cannot work, powershell will return some text with red color so that you can know what error is in the scripts.

I followed the scripts in this blog. It uses two commands to remove the binding of the old certificate and then add the binding of the new certificate, instead of performing two operations in one command. You'd better separate these two operations into two commands as well.

Get-Item IIS:\SslBindings\10.238.82.89!443 | Remove-Item get-item -Path "cert:\LocalMachine\My\$certShop" | new-item -path IIS:\SslBindings\10.238.82.89!443

2 answers

Your answer

Bruce Zhang-MSFT 3,766 Reputation points

2022-04-14T02:27:35.607+00:00

Hi @mc se ,

but it does not work.

Is there any error message reported? If it cannot work, powershell will return some text with red color so that you can know what error is in the scripts.

I followed the scripts in this blog. It uses two commands to remove the binding of the old certificate and then add the binding of the new certificate, instead of performing two operations in one command. You'd better separate these two operations into two commands as well.

Get-Item IIS:\SslBindings\10.238.82.89!443 | Remove-Item get-item -Path "cert:\LocalMachine\My\$certShop" | new-item -path IIS:\SslBindings\10.238.82.89!443

Answer 1

mc se 1

NB: the NEWcertificate.pfx certificate has already been successfully imported into IIS

Answer 2

Rahul Sonar 0

It replaces the certificate but all the other parameters like sslctlstorename, clientcertnegotiation goes away. How to keep all this existing information and only replcace the certificate

Share via

iis - ssl certificate replace with powershell

2 answers

Your answer