Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Get-CertificationAuthorityAcl is no longer returning ACLs on PowerShell 7.4.1 #208

Open
marcgoff opened this issue Feb 6, 2024 · 1 comment
Labels
Investigate The item’s status is investigated (issue or not)

Comments

@marcgoff
Copy link

marcgoff commented Feb 6, 2024

It seems like there is some change in Powershell 7.4+ that causes the Get-CertificationAuthorityAcl to no longer return data.

Expected behavior (using PSPKI 4.2.0 running on Powershell 7.2.18 on Windows Server 2016 Standard):

(Get-CertificationAuthority CA01.uad-dev.xxx.xxx |  Get-CertificationAuthorityAcl).Access

Rights            : Enroll
AccessControlType : Allow
IdentityReference : NT AUTHORITY\Authenticated Users
IsInherited       : False
InheritanceFlags  : None
PropagationFlags  : None

Rights            : ManageCA, ManageCertificates
AccessControlType : Allow
IdentityReference : BUILTIN\Administrators
IsInherited       : False
InheritanceFlags  : None
PropagationFlags  : None

Rights            : ManageCA, ManageCertificates
AccessControlType : Allow
IdentityReference : UAD-DEV\Domain Admins
IsInherited       : False
InheritanceFlags  : None
PropagationFlags  : None

Rights            : ManageCA, ManageCertificates
AccessControlType : Allow
IdentityReference : UAD-DEV\Enterprise Admins
IsInherited       : False
InheritanceFlags  : None
PropagationFlags  : None

Behavior using PSPKI 4.2.0 on Powershell 7.4.1 on Windows Server 2016 Standard:

(Get-CertificationAuthority CA01.uad-dev.xxx.xxx |  Get-CertificationAuthorityAcl -verbose )

Path Owner Access
---- ----- ------

The Get-CertificationAuthority command works fine, it could be something with the GetSecurityDescriptor method.

@Crypt32
Copy link
Collaborator

Crypt32 commented Mar 9, 2024

This module was never tested against PowerShell Core versions. The highest tested version is Windows PowerShell 5.1.

@Crypt32 Crypt32 added the Research Requires additional research or specification clarification label Mar 9, 2024
@Crypt32 Crypt32 added Investigate The item’s status is investigated (issue or not) and removed Research Requires additional research or specification clarification labels Aug 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Investigate The item’s status is investigated (issue or not)
Projects
None yet
Development

No branches or pull requests

2 participants