DSC resources for managing certificates on a Windows Server.

Minimum PowerShell version


This is a prerelease version of CertificateDsc.
There is a newer prerelease version of this module available.
See the version list below for details.

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name CertificateDsc -RequiredVersion 5.1.0-preview0001 -AllowPrerelease

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More


DSC Community


Copyright the DSC Community contributors. All rights reserved.

Package Details



DesiredStateConfiguration DSC DSCResource Certificate PKI


CertificateExport CertificateImport CertReq PfxImport WaitForCertificateServices


This module has no dependencies.

Release Notes

## [5.1.0-preview0001] - 2021-02-19

### Added

- PfxImport:
 - Added Base64Content parameter to specify the content of a PFX file that can be included in the configuration MOF - Fixes [Issue #241](https://github.com/dsccommunity/CertificateDsc/issues/241).
- CertificateImport:
 - Added Base64Content parameter to specify the content of a certificate file that can be included in the configuration MOF - Fixes [Issue #241](https://github.com/dsccommunity/CertificateDsc/issues/241).

### Changed

- Renamed `master` branch to `main` - Fixes [Issue #237](https://github.com/dsccommunity/CertificateDsc/issues/237).
- Updated `GitVersion.yml` to latest pattern - Fixes [Issue #245](https://github.com/dsccommunity/CertificateDsc/issues/245).
- Changed `Test-Thumbprint` to cache supported hash algorithms to increase
 performance - Fixes [Issue #221](https://github.com/dsccommunity/CertificateDsc/issues/221).
- Added warning messages into empty catch blocks in `Certificate.PDT` module to
 assist with debugging.

### Fixed

- Removed requirement for tests to use `New-SelfSignedCertificateEx` from
 [TechNet Gallery due to retirement](https://docs.microsoft.com/teamblog/technet-gallery-retirement).
 This will prevent tests from running on Windows Server 2012 R2 - Fixes [Issue #250](https://github.com/dsccommunity/CertificateDsc/issues/250).
- Fixed FIPS support when used in versions of PowerShell Core 6 & PowerShell 7.
- Moved thumbprint generation for testing into helper function `New-CertificateThumbprint`
 and fixed tests for validating FIPS thumbprints in `Test-Thumbprint` so that it runs
 on PowerShell Core/7.x.


Version History

Version Downloads Last updated
6.0.0-previe... 90 12/23/2022
5.1.0 5,525,338 2/26/2021
5.1.0-previe... 39 2/23/2021
5.1.0-previe... (current version) 44 2/19/2021
5.0.1-previe... 43 2/11/2021
5.0.1-previe... 51 12/31/2020
5.0.0 87,193 10/16/2020
5.0.0-previe... 40 8/30/2020
5.0.0-previe... 82 7/5/2020
5.0.0-previe... 66 5/22/2020
5.0.0-previe... 40 5/17/2020
5.0.0-previe... 66 4/1/2020 18,582,065 6/26/2019 11,328 5/15/2019 18,353 4/3/2019 36,083 2/20/2019 2,510 1/10/2019 6,565 9/5/2018 14,150 6/13/2018 122,728 5/3/2018
Show more