vmware / PowerCLI-Example-Scripts

http://blogs.vmware.com/powercli
Other
743 stars 601 forks source link

Set-SsoAuthenticationPolicy: Certificate Revocation "Disabled" Option? #602

Open ttierno2 opened 1 year ago

ttierno2 commented 1 year ago

Is your feature request related to a problem? Please describe.

The functions in the AuthenticationPolicy.ps1 do work for me, however when I run the command as such:

Get-SsoAuthenticationPolicy | Set-SsoAuthenticationPolicy -SmartCardAuthnEnabled $true -OCSPEnabled $false -UseInCertCRL $false -SendOCSPNonce $false -UseCRLAsFailOver $false -TrustedCAs $Cert_String**

I end up with an 'Unknown' entry under Certificate Revocation (picture attached) Rev_Unknown

You can see when I dig further that no option is selected here after running that command (picture attached) No_Rev_Op

I don't see a way to set 'Certificate revocation' to disabled.

**(I populate the $Cert_String variable properly)

Describe the solution you'd like

A 'Disabled' parameter here, instead of specifying OCSP and/or CRL options, that would set the 'Certificate revocation' to disabled would be extremely helpful.

Describe alternatives you've considered

No response

Additional context

No response