dsccommunity / dsccommunity/SharePointDsc
SPFarm: Add SPServerCertificatePipeBind Support for the Central Administration with SPSE
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 246
- Forks
- 106
- PR merge metrics
- No merged PRs in 30d
Description
Problem description
SharePoint Subscrioption Edition added a few Parameters for the SPCentralAdministration Commands. The Parameter -Certificate is one of them. In conjunction with the Parameter HostHeader, UseServerNameIndication, AllowLegacyEncryption and Url it is now possible to create a Central Administration with an Certificate Binding and a URL of your choosing.
Also with the benefit, that a .Provision() on the Webapplication or a psconfig run does not revert the URL to the default or removes the Binding from IIS.
Also you could run two or more instances of the Central Administration behind a Loadbalancer
Currently this is not possible with the SPFarm Ressource.
Verbose logs
-
DSC configuration
-
Suggested solution
In order to achieve this the following Steps would be required:
- Test if the Cerfificate is imported before running the
New-SPCentralAdministrationorSet-SPCentralAdministrationCommand and Import it if necessary - Expand the Parameters for the
SPCentralAdministrationCommands - Expand the Ressource with the Addional Parameters
I'd be happy to work on a pull request.
I'm a bit concerend that this might get in conflict with the existing SPCertificate Ressource, but also could reuse the existing code :)
Also I'm happy about feedback and if this enhanced fits in.
SharePoint version and build
-
Operating system the target node is running
-
PowerShell version and build the target node is running
-
SharePointDsc version
-
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the SPFarm resource and its handling of New-SPCentralAdministration and Set-SPCentralAdministration, then review the existing SPCertificate resource for reusable certificate-import behavior. Add support for SPServerCertificatePipeBind and the Certificate, HostHeader, UseServerNameIndication, AllowLegacyEncryption, and Url parameters, with tests covering certificate binding and the resulting Central Administration configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- powershell
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100