Microsoft PKI Certificate

[exonix_apc]

This was originally posted on APC forums on 1/23/2019

---

Hello,

How can I replace the self-signed certificate to a certificate issued by Microsoft PKI? The MS Certificate is already installed on the server:

PS C:\> Get-ChildItem -Path cert:\LocalMachine\My\8D7A059D48C94927703C7C599213421BC03267FD | fl -Property *

PSPath                   : Microsoft.PowerShell.Security\Certificate::LocalMachine\My\8D7A059D48C94927703C7C599213421BC03267FD

PSParentPath             : Microsoft.PowerShell.Security\Certificate::LocalMachine\My

PSChildName              : 8D7A059D48C94927703C7C599213421BC03267FD

PSDrive                  : Cert

PSProvider               : Microsoft.PowerShell.Security\Certificate

PSIsContainer            : False

EnhancedKeyUsageList     : {Server Authentication (1.3.6.1.5.5.7.3.1), Client Authentication (1.3.6.1.5.5.7.3.2)}

DnsNameList              : {BER-HYPER1.DOMAIN.COM}

SendAsTrustedIssuer      : False

EnrollmentPolicyEndPoint : Microsoft.CertificateServices.Commands.EnrollmentEndPointProperty

EnrollmentServerEndPoint : Microsoft.CertificateServices.Commands.EnrollmentEndPointProperty

PolicyId                 :

Archived                 : False

Extensions               : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}

FriendlyName             : SCVMM_CERTIFICATE_KEY_CONTAINERBER-HYPER1.DOMAIN.COM

IssuerName               : System.Security.Cryptography.X509Certificates.X500DistinguishedName

NotAfter                 : 01.01.2024 18:55:18

NotBefore                : 06.01.2019 18:55:18

HasPrivateKey            : True

PrivateKey               : System.Security.Cryptography.RSACryptoServiceProvider

PublicKey                : System.Security.Cryptography.X509Certificates.PublicKey

RawData                  : {48, 130, 5, 11...}

SerialNumber             : 4AA80E8FD9998194409475DCE81C8F77

SubjectName              : System.Security.Cryptography.X509Certificates.X500DistinguishedName

SignatureAlgorithm       : System.Security.Cryptography.Oid

Thumbprint               : 8D7A059D48C94927703C7C599213421BC03267FD

Version                  : 3

Handle                   : 3263883337312

Issuer                   : CN=BER-HYPER1.DOMAIN.COM

Subject                  : CN=BER-HYPER1.DOMAIN.COM

I only found an article for OpenSSL.

Thank you!

[exonix_apc]

This was originally posted on APC forums on 1/23/2019

---

It seems to be the same as for OpenSSL. But I can't restart PCNS1:

net stop pcns1

The service name is invalid.

More help is available by typing NET HELPMSG 2185.

I even don't have such service in the service's list. I have the only Agent:

get-service

Status   Name               DisplayName

------   ----               -----------

Running  APCPBEAgent        APC PBE Agent

How can I restart the PowerChute Service?

Thank you!

[BillP · Accepted solution]

This reply was originally posted by Bill on APC forums on 1/23/2019

---

Hi,

You do not have PowerChute Network Shutdown (PCNS) installed on the system. You have PowerChute Business Edition (PCBE) install on the system and that is why the command net stop pcns1 does not work. To stop the PowerChute Business Edition Agent serveice the command is net stop apcpbeagent. 

NOTE: At this time we do not support changing the security certificate of the PowerChute Business Edition Agent. We are looking to make that option available in the future release.