Improve certificate renewal workflow in deserialization failure scenario

[lusassl-msft]

Issue:
Renewing the Auth Certificate failed in the latest implementation of the MonitorExchangeAuthCertificate.ps1 script. This is because we did not add the RawData to the custom object, which we pass to the Import-ExchangeCertificateFromRawData function in case that deserialization of the certificate object has failed.

Reason:
RawData property was missing. Also, null-value scenarios in Import-ExchangeCertificateFromRawData were not covered.

Fix:

• Add RawData to the custom object
• Handle null-value scenarios in Import-ExchangeCertificateFromRawData

Validation:
Lab

[lusassl-msft]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[Copilot]

Pull request overview

This PR fixes a certificate renewal failure in the MonitorExchangeAuthCertificate script that occurred when the Get-ExchangeCertificate cmdlet failed to deserialize the certificate object. The fix ensures RawData is included in the custom object passed to Import-ExchangeCertificateFromRawData, and adds defensive null-checking for RawData in that function.

Changes:

• Added RawData property to the PSCustomObject wrapping the New-ExchangeCertificate result, enabling the Import-ExchangeCertificateFromRawData fallback path to work correctly.
• Added a null guard for $c.RawData in Import-ExchangeCertificateFromRawData to gracefully skip certificates without raw data.
• Improved the thumbprint deserialization check from $null -ne to [System.String]::IsNullOrWhiteSpace() and added a diagnostic verbose log after certificate generation.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
Shared/CertificateFunctions/Import-ExchangeCertificateFromRawData.ps1	Added null check for RawData before attempting import, skipping certificates with missing raw data.
Admin/MonitorExchangeAuthCertificate/ConfigurationAction/New-ExchangeAuthCertificate.ps1	Added RawData to custom object, improved thumbprint validation with IsNullOrWhiteSpace, and added verbose logging.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.