Forum Discussion

Advisor

4 years ago

Certificate "IssuedBy" "Daystoexpire" to be displayed...

Hello,

I have the discovery script:

Quote

##--------------- Discovery ------------------##
$pshost = Get-Host # Get the PowerShell Host.
$pswindow = $pshost.UI.RawUI # Get the PowerShell Host's UI.

$newsize = $pswindow.BufferSize # Get the UI's current Buffer Size.
$newsize.width = 800 # Set the new buffer's width to 800 columns.
$pswindow.buffersize = $newsize # Set the new Buffer Size as active.

$newsize = $pswindow.windowsize # Get the UI's current Window Size.
$newsize.width = 800 # Set the new Window Width to 800 columns.
$pswindow.windowsize = $newsize # Set the new Window Size as active.

$readOnly = [System.Security.Cryptography.X509Certificates.OpenFlags]"ReadOnly"
$localMachine = [System.Security.Cryptography.X509Certificates.StoreLocation]"LocalMachine"
$store = new-object System.Security.Cryptography.X509Certificates.X509Store( "\\##SYSTEM.SYSNAME##\my", $localMachine )

##--------------- Discovery ------------------##
$pshost = Get-Host # Get the PowerShell Host.
$pswindow = $pshost.UI.RawUI # Get the PowerShell Host's UI.

$newsize = $pswindow.BufferSize # Get the UI's current Buffer Size.
$newsize.width = 800 # Set the new buffer's width to 800 columns.
$pswindow.buffersize = $newsize # Set the new Buffer Size as active.

$newsize = $pswindow.windowsize # Get the UI's current Window Size.
$newsize.width = 800 # Set the new Window Width to 800 columns.
$pswindow.windowsize = $newsize # Set the new Window Size as active.

$readOnly = [System.Security.Cryptography.X509Certificates.OpenFlags]"ReadOnly"
$localMachine = [System.Security.Cryptography.X509Certificates.StoreLocation]"LocalMachine"
$store = new-object System.Security.Cryptography.X509Certificates.X509Store( "\\##SYSTEM.SYSNAME##\my", $localMachine )

$store.Open( $readOnly )

$store.Certificates `
| Select-Object { `
$_.Thumbprint + "##" `
+ $(If ($_.FriendlyName -eq "") {"Unknown friendly name (" + $_.Thumbprint + ")"} Else {$_.FriendlyName}) + "##" `
+ $_.Subject + $(If ($_.Subject -ne "") {"(..." + $_.Thumbprint.SubString($_.Thumbprint.length - 5, 5) + ")"} Else {"Unknown subject (" + $_.Thumbprint + ")"}) + "##" `
+ "##" `
+ "cert.issuer=" + $_.Issuer `
+ "&cert.friendlyname=" + $_.FriendlyName `
+ "&cert.serialnumber=" + $_.SerialNumber `
+ "&cert.thumbprint=" + $_.Thumbprint `
} `
| Format-Table -HideTableHeaders

then the

Quote

##-------------- Counters --------------------##
$pshost = Get-Host # Get the PowerShell Host.
$pswindow = $pshost.UI.RawUI # Get the PowerShell Host's UI.

$newsize = $pswindow.BufferSize # Get the UI's current Buffer Size.
$newsize.width = 800 # Set the new buffer's width to 800 columns.
$pswindow.buffersize = $newsize # Set the new Buffer Size as active.

$newsize = $pswindow.windowsize # Get the UI's current Window Size.
$newsize.width = 800 # Set the new Window Width to 800 columns.
$pswindow.windowsize = $newsize # Set the new Window Size as active.

$readOnly = [System.Security.Cryptography.X509Certificates.OpenFlags]"ReadOnly"
$localMachine = [System.Security.Cryptography.X509Certificates.StoreLocation]"LocalMachine"
$store = new-object System.Security.Cryptography.X509Certificates.X509Store( "\\##SYSTEM.SYSNAME##\my", $localMachine )
$properties = @(
# @{n='WildValue';e={"##WildValue##"}},
@{n='CommonName';e={$_.Subject}},
@{n='Thumbprint';e={$_.Thumbprint}},
# @{n='Description';e={"##Description##"}},
@{n='Properties';e={"##Properties##"}},
@{n='IssuedBy';e={($_.Issuer)}},
@{n='daystoexpire';e={($_.NotAfter - [datetime]::Today).Days}}
)

$store.Open( $readOnly )

$store.Certificates `
| Where-Object {($_.Thumbprint -like "##WildValue##")} `
| Select-Object $properties `
| Format-Table -HideTableHeaders

But when populating the groups I have No Data...

and

So we see the data in the Raw Request/ Response fields...

What is happening?

Thanks,

Dom

Mike_Moniz
Professor
4 years ago
Also note that Datapoints can only be numbers, so you will not be able to assign a string directly like "OU=blahblah" to a Datapoint. Instead you can put that kinda data to an auto property via DataSource Active Discovery or PropertySources.
Anonymous
4 years ago
What do your datapoint definitions look like?
Dominique
Advisor
4 years ago
Hello,

These are the datapoint details:

2 datapoints

one for daystoexpire which should be always positive with the 28/7/2 thresholds for Critical/Error/Warning

Then the second datapoints details:

Thanks,

Dom
Dominique
Advisor
4 years ago

2 hours ago, Mike Moniz said:

Also note that Datapoints can only be numbers, so you will not be able to assign a string directly like "OU=blahblah" to a Datapoint. Instead you can put that kinda data to an auto property via DataSource Active Discovery or PropertySources.

Hello,

Good point as I need to collect a text like "CN = xxxx aaaaaa AD Certificate Authority-CA1"...
So if I understand I need to declare it in the Script for Active Directory as it is already

Quote

$store.Certificates `
| Select-Object { `
$_.Thumbprint + "##" `
+ $(If ($_.FriendlyName -eq "") {"Unknown friendly name (" + $_.Thumbprint + ")"} Else {$_.FriendlyName}) + "##" `
+ $_.Subject + $(If ($_.Subject -ne "") {"(..." + $_.Thumbprint.SubString($_.Thumbprint.length - 5, 5) + ")"} Else {"Unknown subject (" + $_.Thumbprint + ")"}) + "##" `
+ "##" `
+ "cert.issuer=" + $_.Issuer `
+ "&cert.friendlyname=" + $_.FriendlyName `
+ "&cert.serialnumber=" + $_.SerialNumber `
+ "&cert.thumbprint=" + $_.Thumbprint `
} `
| Format-Table -HideTableHeaders

"+ "cert.issuer=" + $_.Issuer `"? it should come up ...

Thanks,

Dom
Anonymous
4 years ago
Yes, if you want to capture text attributes about each instance, that will be in the discovery script. if $_.Issuer contains the text, you should be good.

Is your DS script or batchscript? That will drive what the output of your script needs to look like. Assuming script:

I'm not a PowerShell guy, so forgive me. Does your collection script actually output something like this?

daystoexpire: 3

Since the "IssuedBy" will be an instance level property and not a numeric datapoint, the above should be what your output looks like for script.

For batch script, it would need to look like:

215B79E278B3396EDC4973089E8Z1EDE762FEF04.daystoexpire: 3
Dominique
Advisor
4 years ago

Hello,

Is your DS script or batchscript? DS Script

Does your collection script actually output something like this? No

daystoexpire: 3

For batch script, it would need to look like:

215B79E278B3396EDC4973089E8Z1EDE762FEF04.daystoexpire: 3

I have for the "Test Active Discovery Script":

Then for the "Test Active Discovery:

Then for the "Test Datasource Script":

So nothing like the result expected ...

Thanks,
Dom
Dominique
Advisor
4 years ago
Hello,

I changed the content of IssuedBy using this

Quote

@{n='IssuedBy';e={(($_.Issuer -split ",") |? {$_ -like "CN=*"}) -replace "CN="}},

but still not the display you shown.... at least in the "Test Datasource Script" results...

But on the Client the data are here but not filling the Datapoints...

Thanks,

Dom
Anonymous
4 years ago
You need to get it working in test script first. It won't work on the device until you get the output format right from your PowerShell script. You need to output to stdout in the format shown here:

215B79E278B3396EDC4973089E8Z1EDE762FEF04.daystoexpire: 3
Dominique
Advisor
4 years ago
Let me try this get this
Dominique
Advisor
4 years ago

12 hours ago, Stuart Weenig said:

You need to get it working in test script first. It won't work on the device until you get the output format right from your PowerShell script. You need to output to stdout in the format shown here:

215B79E278B3396EDC4973089E8Z1EDE762FEF04.daystoexpire: 3

Hello,

I am getting this now:

Let see how it is on the device...

Thanks,

Dom