Skip to content

v0.0.70

Choose a tag to compare

@PrzemyslawKlys PrzemyslawKlys released this 03 Nov 10:05

Application certificate maintenance

  • Add Register-MyAppCertificateRotation, Get-MyAppCertificateRotation and Invoke-MyAppCertificateRotation for explicit enrollment, safe status, active credential loading and maintenance.
  • Protect local profiles with DPAPI and restricted ACLs; verify fresh authentication before activating a replacement and retain the previous certificate for the configured overlap.
  • Preserve interrupted registration/retirement intent for explicit reconciliation instead of silently repeating uncertain writes.
  • Retain directory inventory and bounded guest invitation workflows, with all 44 public commands documented together.
  • Use the shared allowed-thumbprint selection for signed builds and releases.

Certificate maintenance supports Windows PowerShell 5.1 and PowerShell 7 on Windows in the Microsoft public cloud. It requires an existing valid, exportable RSA software certificate registered on the application. Enrollment and maintenance remain opt-in; imports and connections do not rotate credentials or create schedules.

See the certificate maintenance guide and PR #36.