Get-FasAuthorizationCertificate
SYNOPSIS
List the currently available Authorization certificates in use by the Federated Authentication Service server.
SYNTAX
Get-FasAuthorizationCertificate [-CertificateAuthority <String>] [-FullCertInfo] [-Address <String>]
[-UserName <String>] [-Password <String>] [<CommonParameters>]
<!--NeedCopy-->
DESCRIPTION
List the currently available Authorization certificates in use by the Federated Authentication Service server.
The Federated Authentication Service works by dynamically issuing user logon certificates from a Microsoft Certificate Authority. To do this it must first be granted an “Authorization Certificate” (often called an RA or Enrollement Agent certificate) to authenticate to the Certificate Authority.
This command lists all the Authorization certificates on the FAS server.
The status of each certificate may be one of the following: Ok - the certificate is OK WaitingForApproval - the certificate request is pending approval by the CA administrator Expired - the certificate is expired NotYetValid - the certificate is not yet valid Denied - the certificate request was denied (a reason string is provided)
EXAMPLES
EXAMPLE 1
PS C:\>
C:\PS> $CitrixFasAddress=(Get-FasServer)[0].Address
C:\PS> Get-FasAuthorizationCertificate
<!--NeedCopy-->
Description
This code lists the Authorization certificate on a FAS server. This includes its unique ID, the CA used to issue the certificate, an indication of whether the certificate is currently usable (as opposed to expired or waiting for approval), and the storage container name (TrustArea)
EXAMPLE 2
PS C:\>
C:\PS> $CitrixFasAddress=(Get-FasServer)[0].Address
C:\PS> Get-FasAuthorizationCertificate -FullCertInfo
<!--NeedCopy-->
Description
This code lists the Authorization certificate on a FAS server, including detail about the certificate itself
PARAMETERS
-CertificateAuthority
Filter by Address of the Certificate Authority used to issue the Authorization Certificate ($NULL to return all certificates).
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: $NULL
Accept pipeline input: False
Accept wildcard characters: False
<!--NeedCopy-->
-FullCertInfo
Switch specifying that details of the authorization certificate should be returned
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
<!--NeedCopy-->
-UserName
User name to use for authentication to FAS server ($NULL for current user account)
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: $NULL
Accept pipeline input: False
Accept wildcard characters: False
<!--NeedCopy-->
-Password
Password for authentication to FAS server ($NULL for current user account)
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: $NULL
Accept pipeline input: False
Accept wildcard characters: False
<!--NeedCopy-->
-Address
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
<!--NeedCopy-->
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
INPUTS
Variable, based on property name.
This cmdlet does accept input from the pipeline but only by property name.
OUTPUTS
FasAuthorizationCertificate
This cmdlet returns a list of FasAuthorizationCertificate objects