powershell PowerShell：导入证书

Posted 2021-05-23

<#requires -Version 2.0
Function to import security certificates.

NOTE: To get a list of available store names, run the following command: 
dir cert: | Select -Expand StoreNames

Example Usages:
Import-Certificate -CertFile “VeriSign_Expires-2028.08.01.cer” -StoreNames AuthRoot, Root -LocalMachine

Import-Certificate -CertFile “VeriSign_Expires-2018.05.18.p12” -StoreNames AuthRoot -LocalMachine -CurrentUser -CertPassword Password -Verbose

dir -Path C:\Certs -Filter *.cer | Import-Certificate -CertFile $_ -StoreNames AuthRoot, Root -LocalMachine -Verbose
#>

function Import-Certificate
{
param
(
[IO.FileInfo] $CertFile = $(throw 'Paramerter -CertFile [System.IO.FileInfo] is required.'),
[string[]] $StoreNames = $(throw 'Paramerter -StoreNames [System.String] is required.'),
[switch] $LocalMachine,
[switch] $CurrentUser,
[string] $CertPassword,
[switch] $Verbose
)

begin
{
[void][System.Reflection.Assembly]::LoadWithPartialName('System.Security')
}

process 
{
        if ($Verbose)
{
            $VerbosePreference = 'Continue'
        }
    
if (-not $LocalMachine -and -not $CurrentUser)
{
Write-Warning "One or both of the following parameters are required: '-LocalMachine' '-CurrentUser'. Skipping certificate '$CertFile'."
}

try
{
if ($_)
            {
            $certfile = $_.FullName
            }
            $cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $certfile,$CertPassword
}
catch
{
Write-Error ("Error importing '$certfile': $_ .") -ErrorAction:Continue
}

if ($cert -and $LocalMachine)
{
$StoreScope = 'LocalMachine'
$StoreNames | ForEach-Object {
$StoreName = $_
if (Test-Path "cert:\$StoreScope\$StoreName")
{
try
{
$store = New-Object System.Security.Cryptography.X509Certificates.X509Store $StoreName, $StoreScope
$store.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadWrite)
$store.Add($cert)
$store.Close()
Write-Verbose "Successfully added '$certfile' to 'cert:\$StoreScope\$StoreName'."
}
catch
{
Write-Error ("Error adding '$certfile' to 'cert:\$StoreScope\$StoreName': $_ .") -ErrorAction:Continue
}
}
else
{
Write-Warning "Certificate store '$StoreName' does not exist. Skipping..."
}
}
}

if ($cert -and $CurrentUser)
{
$StoreScope = 'CurrentUser'
$StoreNames | ForEach-Object {
$StoreName = $_
if (Test-Path "cert:\$StoreScope\$StoreName")
{
try
{
$store = New-Object System.Security.Cryptography.X509Certificates.X509Store $StoreName, $StoreScope
$store.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadWrite)
$store.Add($cert)
$store.Close()
Write-Verbose "Successfully added '$certfile' to 'cert:\$StoreScope\$StoreName'."
}
catch
{
Write-Error ("Error adding '$certfile' to 'cert:\$StoreScope\$StoreName': $_ .") -ErrorAction:Continue
}
}
else
{
Write-Warning "Certificate store '$StoreName' does not exist. Skipping..."
}
}
}
}

end
{ }
}

Import-Certificate -CertFile 'F:\Applic\Certificaten\SR001247\KASBANK-Root-CA.cer' -StoreNames Root -LocalMachine -CurrentUser
Import-Certificate -CertFile 'F:\Applic\Certificaten\SR001247\Kas_Pol_Prod_CA(2).cer' -StoreNames CA -LocalMachine -CurrentUser
Import-Certificate -CertFile 'F:\Applic\Certificaten\SR001247\Cust_Prod_CA(1).crt' -StoreNames CA -LocalMachine -CurrentUser