PowerShell PKI module v3.3.0 Release Notes

 Release notes include changes for PSPKI module itself and underlying API library. 

This release is a part of major underlying code structure refactoring.

• Improved module import behavior. The module detects installed dependencies and do not export commands that require missed dependencies.

Cmdlets

Add-CertificateEnrollmentPolicyService

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Add-CertificateEnrollmentService

• Password parameter input type is changed from String to SecureString
• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Approve-CertificateRequest

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Deny-CertificateRequest

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Get-EnterprisePKIHealthStatus

• Fixed issue
• Removed all Write-Host lines

Install-CertificationAuthority

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Remove-CertificateEnrollmentPolicyService

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Remove-CertificateEnrollmentService

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Remove-DatabaseRow

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Uninstall-CertificationAuthority

• Output type is an instance of SysadminsLV.PKI.Utils.IServiceOperationResult interface​

Get-RevokedRequest

Get-IssuedRequest

Get-PendingRequest

Get-FailedRequest

Get-DatabaseRow

Database object values as NoteProperty are deprecated. Instead, they are moved to Properties dictionary collection.

Bug fixes

The following working items were fixed or addressed:

• Remove Write-Host from Get-EnterprisePKIHealthStatus
• Refactor Write-Host and Write-Warning usage
• Getting request data from RawRequest fails
• [Feature request] Change Approve and Deny-CertificateRequest to output object
• [Feature request] Allow -RowID and -Filter to be used together with Get-DatabaseRow
• Add-CertificateEnrollmentService accepts unencrypted password string
• Get-CAExchangeCertificate fails with NullReferenceException
• Bug when using module on 2008R2/2016 Core (possibly other editions too)
• about_PSPKI_Module.help points to codeplex as official support page
• Status Error for all my Enterprise CAs
• Deny-CertificateRequest Warning
• Set-CertificateTemplateAcl enables Enroll and Autoenroll when only Autoenroll is specified

API Library

The following API are marked as obsolete and will be removed in future releases:

• Crypt32Managed.CryptBinaryToString
• Crypt32Managed.CryptStringToBinary
• Crypt32Managed.DecodeX509Extension
• Crypt32Managed.DecodeX509Extensions
• Crypt32Managed.EncodeX509Extension
• Crypt32Managed.EncodeX509Extensions
• CryptEncoding Enumeration
• ManagedCryptUI.DisplayCRL Method
• ManagedCryptUI.DisplayCTL Method
• Csp class
• CspCNG Class
• ALG_ID_CNG Class
• ALG_ID Class
• CspLegacy Class
• CspObject Class
• CspCollection Class
• ALG_IDCollection Class
• CspCNGCollection Class
• CertificateAuthority.GetCA Method
• X509CertificateRequest.SubjectDn Property
• X509CRL2.Import Method
• X509CRL2.Import Method (String)
• X509CRL2.Encode Method (X509EncodingType)
• CertificateAuthority.GetCA Method
• OCSPRequest.SetProxy Method
• MessageSignature Class
• PKCS7SignedMessage Class

Added new classes:

• CspProviderAlgorithmInfo
• CspProviderAlgorithmInfoCollection
• CspProviderInfo
• CspProviderInfoCollection
• AlgorithmIdentifier
• SignedContentBlob
• ContentBlobType
• ContentInfo2
• DefaultSignedPkcs7
• PkcsSignerInfo
• SignedPkcs7<T>
• SubjectIdentifier2
• X509IssuerSerial
• X509CertificateRequestPkcs10
• X509CertificateRequestCmc
• MessageSigner
• SignaturePadding
• ServiceOperationResult
• IServiceOperationResult
• X509CrlBuilder
• X509CrlType

Defined the following classes to provide extension methods to existing .NET classes:

• BigIntegerExtensions
• OidExtensions
• X500DistinguishedNameExtensions
• X509Certificate2CollectionExtensions
• X509Certificate2Extensions
• X509ExtensionCollectionExtensions
• X509ExtensionExtensions

Changes in existing API:

• X509CRL2.Type property is changed from string to a strongly-typed enumeration
• X509CertificateRequest.ExternalData property is changed to X509CertificateRequestCmc type
• X509CRL2 generator is moved to X509CrlBuilder class.

Bug fixes

The following work items were fixed or addressed:

• Support for alternate signature format (RSASSA-PSS) and additional algorithms
• [Bug] X509CRL2.Build fails
• [Feature request] Implement a Get-RDNAttribute function/method
• PKI.OCSP.OCSPRequest class is failing on PowerShell 5
• [Feature] LINQ support in collections
• X509CRLEntry.Encode doesn't encode serial number
• X509CertificateRequest.Subject throws NullReferenceException when subject is null