Gecko [ elibrary.unsap.ac.id ]

Name	Size	Permission	Date
EasyDNS.ps1	7.87 KB	-rw-rw-rw-	2024-05-22 04:53
ImportADFS.ps1	3.13 KB	-rw-rw-rw-	2024-05-22 04:53
ImportAzureADApplicationProxy.ps1	4.4 KB	-rw-rw-rw-	2024-05-22 04:53
ImportAzureApplicationGateway.ps1	6.06 KB	-rw-rw-rw-	2024-05-22 04:53
ImportExchange.ps1	6.34 KB	-rw-rw-rw-	2024-05-22 04:53
ImportExchange.v2.ps1	5.16 KB	-rw-rw-rw-	2024-05-22 04:53
ImportExchangeHybrid.ps1	6.09 KB	-rw-rw-rw-	2024-05-22 04:53
ImportJKS.ps1	1.39 KB	-rw-rw-rw-	2024-05-22 04:53
ImportKemp.ps1	2.59 KB	-rw-rw-rw-	2024-05-22 04:53
ImportNTDS.ps1	2.54 KB	-rw-rw-rw-	2024-05-22 04:53
ImportRDGateway.ps1	2.74 KB	-rw-rw-rw-	2024-05-22 04:53
ImportRDListener.ps1	2.86 KB	-rw-rw-rw-	2024-05-22 04:53
ImportRDS.ps1	2.27 KB	-rw-rw-rw-	2024-05-22 04:53
ImportRDSFull.ps1	8.23 KB	-rw-rw-rw-	2024-05-22 04:53
ImportSQL.ps1	2.19 KB	-rw-rw-rw-	2024-05-22 04:53
ImportSSTP.ps1	3.52 KB	-rw-rw-rw-	2024-05-22 04:53
ImportVRBCloudGateway.ps1	1.13 KB	-rw-rw-rw-	2024-05-22 04:53
ImportWinRM.ps1	2.86 KB	-rw-rw-rw-	2024-05-22 04:53
ImportWinRM.v2.ps1	2.04 KB	-rw-rw-rw-	2024-05-22 04:53
ImportWindowsAdminCenter.ps1	3.25 KB	-rw-rw-rw-	2024-05-22 04:53
PSRDSCerts.bat	364 B	-rwxrwxrwx	2024-05-22 04:53
PSScript.bat	406 B	-rwxrwxrwx	2024-05-22 04:53
microsoft-dns.ps1	443 B	-rw-rw-rw-	2024-05-22 04:53

Rename

param(
    [Parameter(Position=0,Mandatory=$true)]
    [string]$NewCertThumbprint,
    [Parameter(Position=1,Mandatory=$false)]
    [int]$RecreateDefaultBindings = 1
)

Import-Module RemoteAccess

$CertInStore = Get-ChildItem -Path Cert:\LocalMachine -Recurse | Where-Object {$_.thumbprint -eq $NewCertThumbprint} | Sort-Object -Descending | Select-Object -f 1
if($CertInStore){
    try{
        # Cert must exist in the personal store of machine to bind to RRAS
        if($CertInStore.PSPath -notlike "*LocalMachine\My\*"){
            $SourceStoreScope = 'LocalMachine'
            $SourceStorename = $CertInStore.PSParentPath.split("\")[-1]

$SourceStore = New-Object  -TypeName System.Security.Cryptography.X509Certificates.X509Store  -ArgumentList $SourceStorename, $SourceStoreScope
            $SourceStore.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadOnly)
            
            $cert = $SourceStore.Certificates | Where-Object {$_.thumbprint -eq $CertInStore.Thumbprint}
            
            
            
            $DestStoreScope = 'LocalMachine'
            $DestStoreName = 'My'
            
            $DestStore = New-Object  -TypeName System.Security.Cryptography.X509Certificates.X509Store  -ArgumentList $DestStoreName, $DestStoreScope
            $DestStore.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadWrite)
            $DestStore.Add($cert)
            
            
            $SourceStore.Close()
            $DestStore.Close()

$CertInStore = Get-ChildItem -Path Cert:\LocalMachine\My -Recurse | Where-Object {$_.thumbprint -eq $NewCertThumbprint} | Sort-Object -Descending | Select-Object -f 1
        }
        "Stopping RemoteAccess service to prevent errors..."
        Stop-Service RemoteAccess
        if($RecreateDefaultBindings -eq 1)
        {
            "Checking if we need to replace default binding..."
            $replace = $false;
            $binds = Get-WebBinding -Name "Default Web Site" -Protocol https;
            for ($i=0; $i -lt $binds.length; $i++)
            {
                if(($binds[$i] | Select-Object -ExpandProperty bindingInformation) -eq "*:443:")
                {
                    "Default binding detected. Deleting..."
                    $binds[$i] | Remove-WebBinding;
                    $replace = $true;
                    break;
                }
            }
            if($replace -eq $true)
            {
                "Creating new default binding..."
                $binding = New-WebBinding -Name "Default Web Site" -Protocol https -IPAddress * -Port 443 -Force;
                $binds = Get-WebBinding -Name "Default Web Site" -Protocol https;
                for ($i=0; $i -lt $binds.length; $i++)
                {
                    if(($binds[$i] | Select-Object -ExpandProperty bindingInformation) -eq "*:443:")
                    {
                        $binding = $binds[$i];
                        break;
                    }
                }
                "Assigning certificate to new default binding..."
                $binding.AddSslCertificate($NewCertThumbprint, "my");
            }
        }
        "Assigning certificate to RRAS..."
        Set-RemoteAccess -SslCertificate $CertInStore
        "SSTP SSL certificate has been applied, restarting RemoteAccess..."
        Start-Service RemoteAccess
    }catch{
        "Cert thumbprint was not set successfully"
        "Error: $($Error[0])"
    }
}else{
    "Cert thumbprint not found in the cert store... which is strange because it should be there."
}