dsccommunity / dsccommunity/SharePointDsc

SPFarm: Add SPServerCertificatePipeBind Support for the Central Administration with SPSE

Open
#1,436 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C#
Stars
246
Forks
106
PR merge metrics
No merged PRs in 30d

Description

Problem description

SharePoint Subscrioption Edition added a few Parameters for the SPCentralAdministration Commands. The Parameter -Certificate is one of them. In conjunction with the Parameter HostHeader, UseServerNameIndication, AllowLegacyEncryption and Url it is now possible to create a Central Administration with an Certificate Binding and a URL of your choosing.
Also with the benefit, that a .Provision() on the Webapplication or a psconfig run does not revert the URL to the default or removes the Binding from IIS.
Also you could run two or more instances of the Central Administration behind a Loadbalancer

Currently this is not possible with the SPFarm Ressource.

Verbose logs
-
DSC configuration
-
Suggested solution

In order to achieve this the following Steps would be required:

  • Test if the Cerfificate is imported before running the New-SPCentralAdministration or Set-SPCentralAdministration Command and Import it if necessary
  • Expand the Parameters for the SPCentralAdministration Commands
  • Expand the Ressource with the Addional Parameters

I'd be happy to work on a pull request.
I'm a bit concerend that this might get in conflict with the existing SPCertificate Ressource, but also could reuse the existing code :)
Also I'm happy about feedback and if this enhanced fits in.

SharePoint version and build
-
Operating system the target node is running
-
PowerShell version and build the target node is running
-
SharePointDsc version
-

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the SPFarm resource and its handling of New-SPCentralAdministration and Set-SPCentralAdministration, then review the existing SPCertificate resource for reusable certificate-import behavior. Add support for SPServerCertificatePipeBind and the Certificate, HostHeader, UseServerNameIndication, AllowLegacyEncryption, and Url parameters, with tests covering certificate binding and the resulting Central Administration configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.