Import-Pfx Cert w/ Password - deployment

user_3298643 0
Viewed 4283

I want to push out a cert w/ a private key password. I know its not secure. A more secure way would be great. But i cannot figure out to do it. 

$test = ConvertTo-SecureString -String "plaintextpassword" -Force -AsPlainText<code>

Import-PfxCertificate -FilePath $filelocale -CertStoreLocation Cert:\LocalMachine\My -Password $test

Getting: Import-PfxCertificate : The PFX file you are trying to import requires either a different password or membership in an Active Directory principal to which it is protected.

If I run below it works

$test = Get-Credential -UserName 'enter pwd' -Message "Enter PWD"

Import-PfxCertificate -FilePath $filelocale -CertStoreLocation Cert:\LocalMachine\My -Password $test.Password
windows-10 powershell
1 Answers

Since using a credential object does the trick, just create the credential without using prompts:

$Pass = ConvertTo-SecureString -String 'plaintextpassword' -Force -AsPlainText
$User = "whatever"
$Cred = New-Object -TypeName "System.Management.Automation.PSCredential" -ArgumentList $User, $Pass
Import-PfxCertificate -FilePath $filelocale -CertStoreLocation Cert:\LocalMachine\My -Password $Cred.Password

Note the single quotation marks I used to stop PowerShell from interpreting the input. This is especially important on any password with symbols. If using the credential object does not work when using double quotes around "plaintextpassword" it is likely the issue is simply what you put in is not what you're actually getting in the final result.

If you want to check it yourself, you can use the following based on "Working with Passwords, Secure Strings and Credentials in Windows PowerShell." It is definitely worth a read.

$Pass = ConvertTo-SecureString -String "plaintext$_password" -Force -AsPlainText
$User = "whatever"
$Cred = New-Object -TypeName "System.Management.Automation.PSCredential" -ArgumentList $User, $Pass
$BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Cred.Password)
$PlainPassword = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)
$PlainPassword

Pay special attention to the use of double quotes and additional $_ that causes the problem. Color formatting might help you spot the issue earlier if you're using a recent PowerShell or other tool that has highlighting. You'll probably see what I mean.

user_41721240
Related