Open zivillian opened 7 years ago
That's an issue for us too. IIS uses/supports both stores, so the desired one should be selectable. According to this IIS documentation page, the WebHosting
store is the preferred one when using SNI because of scalability:
The Web Hosting store works like the Personal store, so all of the existing tools to import and export certificates work the same way. The key difference between Web Hosting store and Personal store is that Web Hosting store is designed to scale to higher numbers of certificates.
So it would be really important to support this out of the box.
Currentyl we are importing our IIS Certificates into the WebHosting store (which is also used, when requesting a certificate from IIS Console). The WinRM IIS Web App Management currently support only the Personal Store (MY) which ist hardcoded in AppCmdOnTargetMachines.ps1