Edit

Get-AzArtifactSigningCertificateChain

Retrieve Azure.ArtifactSigning Certificate Chain

Syntax

ByAccountProfileNameParameterSet (Default)

Get-AzArtifactSigningCertificateChain
    [-AccountName] <String>
    [-ProfileName] <String>
    [-EndpointUrl] <String>
    [-Destination] <String>
    [-DefaultProfile <IAzureContextContainer>]
    [<CommonParameters>]

ByMetadataFileParameterSet

Get-AzArtifactSigningCertificateChain
    [-MetadataFilePath] <String>
    [-Destination] <String>
    [-DefaultProfile <IAzureContextContainer>]
    [<CommonParameters>]

Description

The Get-AzArtifactSigningCertificateChain cmdlet retrieves Azure ArtifactSigning Cert Chain. Use this cmdlet to retrieve Azure ArtifactSigning Cert Chain. There are two sets of parameters. One set uses AccountName, ProfileName, and EndpointUrl. Another set uses MetadataFilePath. Destination is the downloaded cert chain file path, which includes the file name and extension .der.

Examples

Example 1: Retrieve a cert chain by account and profile name

Get-AzArtifactSigningCertificateChain -AccountName 'contoso' -ProfileName 'contososigning' -EndpointUrl 'https://wus.artifactsigning.azure.net' -Destination 'c:\acs\certificatechain.der'
Thumbprint                               Subject
----------                               -------
F40042E2E5F7E8EF8189FED15519AECE4        CN=Microsoft Identity Verification Root Certificate Authority 2020, O=Microso
8E750F459DAF9A79D6370DB747AD22268        CN=Microsoft ID Verified Code Signing PCA 2021, O=Microsoft Corporation, C=US
8BC0201379A2A31BA36EDD20223865C19        CN=Microsoft ID Verified CS EOC CA 02, O=Microsoft Corporation, C=US
1248C3FB98958560D5A73A75DEF9F624B        CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US

This command retrieves a certificate chain that is currently in use for signing by the account and profile.

Example 2: Retrieve a cert chain using the metadata file path configuration

Get-AzArtifactSigningCertificateChain -MetadataFilePath 'c:\cisigning\metadata_input.json' -Destination 'c:\acs\certificatechain.der'
Thumbprint                               Subject
----------                               -------
F40042E2E5F7E8EF8189FED15519AECE4        CN=Microsoft Identity Verification Root Certificate Authority 2020, O=Microso
8E750F459DAF9A79D6370DB747AD22268        CN=Microsoft ID Verified Code Signing PCA 2021, O=Microsoft Corporation, C=US
8BC0201379A2A31BA36EDD20223865C19        CN=Microsoft ID Verified CS EOC CA 02, O=Microsoft Corporation, C=US
1248C3FB98958560D5A73A75DEF9F624B        CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US

This command retrieves a certificate chain that is currently in use for signing by the metadata configuration.

Parameters

-AccountName

Specifies Azure ArtifactSigning AccountName used to sign CI policy.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ByAccountProfileNameParameterSet
Position:0
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with Azure.

Parameter properties

Type:IAzureContextContainer
Default value:None
Supports wildcards:False
DontShow:False
Aliases:AzContext, AzureRmContext, AzureCredential

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Destination

Specifies the downloaded cert chain file path.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:3
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-EndpointUrl

Specifies Azure ArtifactSigning Endpoint used to sign CI policy. It's an Url, format is https://xxx.artifactsigning.azure.net

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ByAccountProfileNameParameterSet
Position:2
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-MetadataFilePath

Specifies Azure ArtifactSigning Metadata file path used to sign CI policy. It's a file path, and the metadata content is below. File content example: { "Endpoint": "https://xxx.artifactsigning.azure.net/", "ArtifactSigningAccountName": "acstest", "CertificateProfileName": "acstestCert1" }

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ByMetadataFileParameterSet
Position:0
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

-ProfileName

Specifies Azure ArtifactSigning ProfileName used to sign CI policy.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ByAccountProfileNameParameterSet
Position:1
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:True
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

Azure ArtifactSigning AccountName

Azure ArtifactSigning Profile Name

Azure ArtifactSigning Signing EndpointUrl

Azure ArtifactSigning UnSigned CI Policy File Path

Azure ArtifactSigning Signed CI Policy File Path Destination

String

Outputs

Signed CI Policy file