Hi Everyone,
I have a list of VMs where I want to delete a few Certificates, some of these certificates on these windows boxes have the same name so I am trying to get the certificate thumbprint and then remove by using that. While also trying to build in some logic to the script.
I am having an issue with this line specifically
Invoke-VMScript -VM $vm -Server $hosts -ScriptText "Get-ChildItem -Path Cert:\LocalMachine\My | Where-Object {$_.Thumbprint -EQ $certificateThumbprint3}" -GuestCredential $cred
For whatever reason the command does not like $_.Thumbprint, when i run this command locally on a server it functions without issue. Seems to only be an issue using invoke-vm
One way I got it to work was to use this syntax Where-Object -Property Thumbprint -EQ $certificateThumbprint3 the issue is I am struggling trying to add the other 2 variables to the syntax.
Below is the script any help would be greatly appreciated.
# Setup Array With Hosts
$hosts = @(
"example vcenter",
"example vcenter"
);
# Connect to both vCenters
# Connect-VIServer -Server $hosts
# Admin Credential for VMs you are connecting to
$cred = Get-Credential
# Define the thumbprint of the certificate to check for
$certificateThumbprint1 = "Thumb Print"
$certificateThumbprint2 = "Thumb Print"
$certificateThumbprint3 = "Thumb Print"
# Get a list of all VMs
#$vms = Get-VM -Name "*core*" -Server $hosts | Where-Object {$_.PowerState -eq "PoweredOn"}
#$vms = Get-Content C:\ps1\Cert_Status.txt
$vms = get-vm -Name "VMName" -Server $hosts
# Create an empty array to store the results
$results = @()
# Loop through each VM
foreach ($vm in $vms) {
# Connect to the VM
Invoke-VMScript -VM $vm -Server $hosts -ScriptText "Test-Path Cert:\LocalMachine\My" -GuestCredential $cred
if ($LastExitCode -eq 0) {
# Path exist
Invoke-VMScript -VM $vm -Server $hosts -ScriptText "Get-ChildItem -Path Cert:\LocalMachine\My | Where-Object {$_.Thumbprint -EQ $certificateThumbprint3}" -GuestCredential $cred
if ($LastExitCode -eq 0) {
# Certificate is present, remove it
Invoke-VMScript -VM $vm -Server $hosts -ScriptText "Remove-Item -Path Cert:\LocalMachine\My -Recurse | Where-Object {$_.Thumbprint -eq '$certificateThumbprint1' -or $_.Thumbprint -eq '$certificateThumbprint2' -or $_.Thumbprint -eq '$certificateThumbprint3' }" -GuestCredential $cred
# Add the VM name and status to the results array
$results += New-Object PSObject -Property @{
VMName = $vm.Name
Status = "Certificate removed"
}
} else {
# Add the VM name and status to the results array
$results += New-Object PSObject -Property @{
VMName = $vm.Name
Status = "Certificate not found"
}
}
} else {
# Path not exist
$results += New-Object PSObject -Property @{
VMName = $vm.Name
Status = "Cert:\LocalMachine\My not exist"
}
}
}
# Output the results to a text file
$results | Export-Csv -NoTypeInformation -Path C:\export\Cert_Removal.csv
