Repository navigation
v0.0.70
Application certificate maintenance
- Add
Register-MyAppCertificateRotation,Get-MyAppCertificateRotationandInvoke-MyAppCertificateRotationfor explicit enrollment, safe status, active credential loading and maintenance. - Protect local profiles with DPAPI and restricted ACLs; verify fresh authentication before activating a replacement and retain the previous certificate for the configured overlap.
- Preserve interrupted registration/retirement intent for explicit reconciliation instead of silently repeating uncertain writes.
- Retain directory inventory and bounded guest invitation workflows, with all 44 public commands documented together.
- Use the shared allowed-thumbprint selection for signed builds and releases.
Certificate maintenance supports Windows PowerShell 5.1 and PowerShell 7 on Windows in the Microsoft public cloud. It requires an existing valid, exportable RSA software certificate registered on the application. Enrollment and maintenance remain opt-in; imports and connections do not rotate credentials or create schedules.
See the certificate maintenance guide and PR #36.