使用证书签名PowerShell脚本

标签：powershell 脚本签名

1.创建自签名证书（如需要）

PS C:\Windows\system32> New-SelfSignedCertificate -DnsName www.mycard.com -CertStoreLocation Cert:\CurrentUser\My


    目录: Microsoft.PowerShell.Security\Certificate::CurrentUser\My


Thumbprint                                Subject
----------                                -------
313C6D95807E577BBD62D3F0A31077C911B72EB6  CN=www.mycard.com

2.获取证书

    a).查找证书存储位置

PS C:\Windows\system32> Get-PSDrive

Name           Used (GB)     Free (GB) Provider      Root
----           ---------     --------- --------      ----
Alias                                  Alias
C                  44.32         16.86 FileSystem    C:Cert                                   Certificate   \

PS C:\Windows\system32> dir Cert:\CurrentUser\My -OutVariable x


    目录: Microsoft.PowerShell.Security\Certificate::CurrentUser\My


Thumbprint                                Subject
----------                                -------
C744543541A7B9E5E0085F38351727765A716415  CN=domain\user
313C6D95807E577BBD62D3F0A31077C911B72EB6  CN=www.mycard.com

PS C:\Windows\system32> $x[0]


    目录: Microsoft.PowerShell.Security\Certificate::CurrentUser\My


Thumbprint                                Subject
----------                                -------
C744543541A7B9E5E0085F38351727765A716415  CN=domain\user

3.脚本签名前后

PS C:\Windows\system32> cat E:\1.ps1
Get-Variable

PS C:\Windows\system32> Set-AuthenticodeSignature -Certificate $x[0] -FilePath ‘E:\1.ps1‘


    目录: E:

SignerCertificate                         Status                                 Path
-----------------                         ------                                 ----
FBD0E44E1011C4C992CD5004D73137A3EC0E5AE4  Valid                                  1.ps1

PS C:\Windows\system32> cat E:\1.ps1
Get-Variable
# SIG # Begin signature block
# MIIHfgYJKoZIhvcNAQcCoIIHbzCCB2sCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB
# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR
# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUFo/Es9HHBQSTlqXXU6T/dWK2
# l7KgggV6MIIFdjCCBF6gAwIBAgIKE3B1nwAAAABmQDANBgkqhkiG9w0BAQUFADBA
# MRMwEQYKCZImiZPyLGQBGRYDY29tMRUwEwYKCZImiZPyLGQBGRYFY25wZGMxEjAQ
# BgNVBAMTCUNOUERDY2VydDAeFw0xNDExMjAwMzI5MzhaFw0xNTExMjAwMzI5Mzha
# MHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFTATBgoJkiaJk/IsZAEZFgVjbnBkYzEV
# MBMGA1UECxMMUHJpdmF0ZUNsb3VkMQ8wDQYDVQQLEwZDb21tb24xEDAOBgNVBAsT
# B0FjY291bnQxEDAOBgNVBAMTB3NwYWRtaW4wgZ8wDQYJKoZIhvcNAQEBBQADgY0A
# MIGJAoGBAJbTBOSiC0gfzz0Nd+KfSL/1Ct2T3WNn6B/8/KKHp8moNQ5kQ/l3YTJP
# a/bnmldT+JjJb4+2xiXZPZjlsq6I1HgX3LA34/eexORtyhcqB7mFlM70jO+PIw1c
# QjB9e0gtXghWshN7f3NpfEI/9WEgZx05MoDCG2y/PiPHSnVGVmm7AgMBAAGjggK8
# MIICuDALBgNVHQ8EBAMCB4AwJQYJKwYBBAGCNxQCBBgeFgBDAG8AZABlAFMAaQBn
# AG4AaQBuAGcwHQYDVR0OBBYEFHxUArZcQ8ZogC8gukXPkqk2M0SaMB8GA1UdIwQY
# MBaAFEIyEaRnajbL+TplBvaCT4ejW5bsMIH0BgNVHR8EgewwgekwgeaggeOggeCG
# gaxsZGFwOi8vL0NOPUNOUERDY2VydCxDTj13YWFjYSxDTj1DRFAsQ049UHVibGlj
# JTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixE
# Qz1jbnBkYyxEQz1jb20/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29i
# amVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50hi9odHRwOi8vd2FhY2EuY25w
# ZGMuY29tL0NlcnRFbnJvbGwvQ05QRENjZXJ0LmNybDCCAQYGCCsGAQUFBwEBBIH5
# MIH2MIGmBggrBgEFBQcwAoaBmWxkYXA6Ly8vQ049Q05QRENjZXJ0LENOPUFJQSxD
# Tj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1
# cmF0aW9uLERDPWNucGRjLERDPWNvbT9jQUNlcnRpZmljYXRlP2Jhc2U/b2JqZWN0
# Q2xhc3M9Y2VydGlmaWNhdGlvbkF1dGhvcml0eTBLBggrBgEFBQcwAoY/aHR0cDov
# L3dhYWNhLmNucGRjLmNvbS9DZXJ0RW5yb2xsL3dhYWNhLmNucGRjLmNvbV9DTlBE
# Q2NlcnQuY3J0MBMGA1UdJQQMMAoGCCsGAQUFBwMDMCwGA1UdEQQlMCOgIQYKKwYB
# BAGCNxQCA6ATDBFzcGFkbWluQGNucGRjLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEA
# V6r7xoyewB2qs8aV/eZ9maOUgbn9edi/+4x5meNTc4hHRJQdEel0Ypz+9byxF23t
# OlIsQdqF0ylnsejy8xDiZl66VbWpMf+lqlMzgepZ5g2iraRIzf9OPA1mpCoexLog
# 7VmfFcLy+pNaU7Swr41Qev9bXF3DvqCh6GKYEiCnzAjwvDLiBp6jfF8ZlE7JpHQI
# kHvHb1hbxtadgcyqSofD0Gp7IIcO9MelaOUWw13gXFrHNvTW1SAKrCidlPoP/no9
# tYEOXhth+Nv5uBVBZwlTw9nAHcg+pjg+9pITfiQih4C+aes3nl58YBXDaXbMz+rv
# OQDWjRExCHV20WulypLqfzGCAW4wggFqAgEBME4wQDETMBEGCgmSJomT8ixkARkW
# A2NvbTEVMBMGCgmSJomT8ixkARkWBWNucGRjMRIwEAYDVQQDEwlDTlBEQ2NlcnQC
# ChNwdZ8AAAAAZkAwCQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwxCjAIoAKAAKEC
# gAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwG
# CisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFHwOQIGZoxKLrIov7cZ1wBhrMA57
# MA0GCSqGSIb3DQEBAQUABIGAEmp+D25Uxjxuof3PzPuOagbWurKjYYnds8ThTCuj
# lswYU6DMnXyp37HLbl0tvNMYnXk71GUX/p4KC/EN9RDUWtipZUrCtydwlfPQPEAw
# KGaz0eKD0h2TAwLliTcHRM+WhjgSur2N5Or4z3EXCca8mJjesVZJj5eZfNPK97sX
# TeU=
# SIG # End signature block

使用证书签名PowerShell脚本

标签：powershell 脚本签名

原文地址：http://elves.blog.51cto.com/663286/1580009