DSC resources for managing certificates on a Windows Server.

Minimum PowerShell version


Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name CertificateDsc

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More


DSC Community


Copyright the DSC Community contributors. All rights reserved.



DesiredStateConfiguration DSC DSCResource Certificate PKI


CertificateExport CertificateImport CertReq PfxImport WaitForCertificateServices


This module has no dependencies.

Release Notes

## [5.1.0] - 2021-02-26

### Added

- PfxImport:
 - Added Base64Content parameter to specify the content of a PFX file that can
   be included in the configuration MOF - Fixes [Issue #241](https://github.com/dsccommunity/CertificateDsc/issues/241).
- CertificateImport:
 - Added Base64Content parameter to specify the content of a certificate file
   that can be included in the configuration MOF - Fixes [Issue #241](https://github.com/dsccommunity/CertificateDsc/issues/241).

### Changed

- Fix bug where `Import-PfxCertificateEx` would not install private keys in the
 ALLUSERSPROFILE path when importing to LocalMachine store. [Issue #248](https://github.com/dsccommunity/CertificateDsc/issues/248).
- Renamed `master` branch to `main` - Fixes [Issue #237](https://github.com/dsccommunity/CertificateDsc/issues/237).
- Updated `GitVersion.yml` to latest pattern - Fixes [Issue #245](https://github.com/dsccommunity/CertificateDsc/issues/245).
- Changed `Test-Thumbprint` to cache supported hash algorithms to increase
 performance - Fixes [Issue #221](https://github.com/dsccommunity/CertificateDsc/issues/221).
- Added warning messages into empty catch blocks in `Certificate.PDT` module to
 assist with debugging.

### Fixed

- Removed requirement for tests to use `New-SelfSignedCertificateEx` from
 [TechNet Gallery due to retirement](https://docs.microsoft.com/teamblog/technet-gallery-retirement).
 This will prevent tests from running on Windows Server 2012 R2 - Fixes [Issue #250](https://github.com/dsccommunity/CertificateDsc/issues/250).
- Fixed FIPS support when used in versions of PowerShell Core 6 & PowerShell 7.
- Moved thumbprint generation for testing into helper function `New-CertificateThumbprint`
 and fixed tests for validating FIPS thumbprints in `Test-Thumbprint` so that it
 runs on PowerShell Core/7.x.

Version History

Version Downloads Last updated
5.1.0 (current version) 1,861,494 2/26/2021
5.1.0-previe... 8 2/23/2021
5.1.0-previe... 12 2/19/2021
5.0.1-previe... 12 2/11/2021
5.0.1-previe... 20 12/31/2020
5.0.0 45,163 10/16/2020
5.0.0-previe... 10 8/30/2020
5.0.0-previe... 49 7/5/2020
5.0.0-previe... 34 5/22/2020
5.0.0-previe... 9 5/17/2020
5.0.0-previe... 34 4/1/2020 18,578,856 6/26/2019 10,932 5/15/2019 18,307 4/3/2019 36,005 2/20/2019 2,461 1/10/2019 6,505 9/5/2018 14,094 6/13/2018 122,675 5/3/2018