powershell - 如何信任 Windows Powershell 中的证书

Question

我正在使用 Windows 7 ，并希望运行来自 Powershell 的签名脚本, security-settings Powershell 设置为 "all-signed" ，我的脚本用 valid certificate 签名从我公司。我还添加了 .pfx-file到我本地的证书存储 (right-clicked the pfx-file and installed) .

但是，当我启动一个签名脚本时，我收到一条消息:

"Do you want to run software from this untrusted publisher?
File Z:\Powershell Signed Scripts\signed.ps1 is published by CN=[MyCompanyName] and is not trusted on your system. Only run scripts from
 trusted publishers.
[V] Never run  [D] Do not run  [R] Run once  [A] Always run  [?] Help
(default is "D"):"

因为我想在我的系统上自动调用这些脚本，所以我想将我导入的证书添加到我系统上的受信任列表中，这样我第一次运行签名脚本时就不会再收到消息。如何使我的证书成为可信证书？

Answer 1

How to trust a certificate in Windows Powershell

事实上，你可以在没有任何 mmc 的情况下做到这一点 :)
首先，检查您的个人证书的位置，例如“Power”:

Get-ChildItem -Recurse cert:\CurrentUser\ |where {$_ -Match "Power"} | Select PSParentPath,Subject,Issuer,HasPrivateKey |ft -AutoSize

(这个应该是空的:)

gci cert:\CurrentUser\TrustedPublisher

使用证书路径构建命令:

$cert = Get-ChildItem    Certificate::CurrentUser\My\ABLALAH

下一步工作 certificate store (这里我在两个证书存储区工作:用户和计算机)

$store = New-Object System.Security.Cryptography.X509Certificates.X509Store "TrustedPublisher","LocalMachine"
$store.Open("ReadWrite")
$store.Add($cert)
$store.Close()

检查，您应该找到您的证书:

ls cert:\CurrentUser\TrustedPublisher