none
Replace SSL certificates and update bindings RRS feed

  • Question

  • Is this the defacto best practice for replacing certificates?

    https://devblogs.microsoft.com/scripting/weekend-scripter-use-powershell-to-update-ssl-bindings/

    I'm not keen on the delete/create procedure. I see there is a Switch-Certificate method now, but it talks about things that don't exactly make sense to me. For instance, what is the "replace certificate notification"

    https://docs.microsoft.com/en-us/powershell/module/pkiclient/switch-certificate?view=winserver2012r2-ps

    We also have non-IIS bindings for in-house built services. In the past we've used netsh to update those, but if switch-certificate can handle both IIS bindings and service bindings, that would really streamline things.

    Thursday, March 7, 2019 8:14 PM

All replies