SqlCertForge.Audit
2.0.0
Minimum PowerShell version
5.1
Installation Options
Owners
Package Details
Author(s)
- Keith Ramsey
Tags
SQL TLS Certificate ReportingServices PBIRS SSRS Audit ReadOnly MCP TDE AlwaysEncrypted Endpoint BackupEncryption PolyBase Inventory
Functions
Get-RsHttpConfig Test-RsHttpsEndpoint Test-SqlCertBinding Test-RsCertBinding Get-SqlCertInventory Test-SqlTdeConfiguration Test-SqlBackupEncryptionReadiness Test-SqlEndpointCertAuth Test-SqlColumnMasterKey Test-SqlCellKeyHierarchy Test-SqlPolyBaseCertificate Test-SqlCertClientTrust
PSEditions
Dependencies
This module has no dependencies.
Release Notes
v2.0.0: the read-only audit edition grows from four commands to twelve, matching the read-only surface of the full SqlCertForge module and the v2.0.0 C# MCP. Every command is read-only and never throws -- a read error is reported as a Failed result, not an exception. New in v2.0.0: Get-SqlCertInventory (estate-wide certificate inventory across engine, Reporting Services, TDE, backup, endpoint and cell surfaces, with expiry), Test-SqlTdeConfiguration, Test-SqlBackupEncryptionReadiness, Test-SqlEndpointCertAuth, Test-SqlColumnMasterKey, Test-SqlCellKeyHierarchy, Test-SqlPolyBaseCertificate and Test-SqlCertClientTrust. The original four (Get-RsHttpConfig, Test-RsHttpsEndpoint, Test-SqlCertBinding, Test-RsCertBinding) are unchanged. The DMV-backed checks read through the dbatools or SqlServer module when present and report a Failed result naming the missing provider when neither is; the registry, WMI and store checks have no such dependency. Safe against production. Runs on Windows PowerShell 5.1 and PowerShell 7. The bundled zero-dependency stdio MCP server exposes all twelve commands as read-only tools. State-changing provisioning remains in the full SqlCertForge module.
FileList
- SqlCertForge.Audit.nuspec
- Docs\Convert-MdToPdf.ps1
- Docs\HOW-TO-USE-SQLCERTFORGE-AUDIT.gen.html
- Docs\HOW-TO-USE-SQLCERTFORGE-AUDIT.md
- Docs\HOW-TO-USE-SQLCERTFORGE-AUDIT.pdf
- Docs\images\audit-vs-fix.svg
- LICENSE
- Private\Add-SqlCertConnectivityHint.ps1
- Private\Get-BackupCertRow.ps1
- Private\Get-CellCertRow.ps1
- Private\Get-EndpointCertRow.ps1
- Private\Get-RsCertRow.ps1
- Private\Get-SqlCaCertificate.ps1
- Private\Get-SqlCertFileThumbprint.ps1
- Private\Get-SqlCertFromTargetStore.ps1
- Private\Get-SqlEngineCertRow.ps1
- Private\Get-SqlRsInstance.ps1
- Private\Get-SqlRsRegisteredUrl.ps1
- Private\Get-TdeCertRow.ps1
- Private\Invoke-RsHttpProbe.ps1
- Private\Invoke-SqlCertHttpBinding.ps1
- Private\Invoke-SqlCertInventoryQuery.ps1
- Private\Invoke-SqlRsCimBinding.ps1
- Private\New-SqlCertInventoryRow.ps1
- Private\New-SqlCertResult.ps1
- Private\Resolve-SqlCertThumbprint.ps1
- Private\Test-SqlCertDbatoolsAvailable.ps1
- Private\Test-SqlCertInRootStore.ps1
- Public\Get-RsHttpConfig.ps1
- Public\Get-SqlCertInventory.ps1
- Public\Test-RsCertBinding.ps1
- Public\Test-RsHttpsEndpoint.ps1
- Public\Test-SqlBackupEncryptionReadiness.ps1
- Public\Test-SqlCellKeyHierarchy.ps1
- Public\Test-SqlCertBinding.ps1
- Public\Test-SqlCertClientTrust.ps1
- Public\Test-SqlColumnMasterKey.ps1
- Public\Test-SqlEndpointCertAuth.ps1
- Public\Test-SqlPolyBaseCertificate.ps1
- Public\Test-SqlTdeConfiguration.ps1
- SqlCertForge.Audit.psd1
- SqlCertForge.Audit.psm1
- mcp\README.md
- mcp\Start-SqlCertAuditMcp.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 2.0.0 (current version) | 4 | 9/16/2026 |
| 1.0.0 | 20 | 8/26/2026 |