Automated certificate handling in Azure DevOps
While Azure services have quite good support for certificate handling these days, on premises deployments using Azure Devops dont provide much in the way of certificate handling. To work around this, I’ve scripted up a solution that retrives a certicate, installs it on the host and then puts the certificate thumbprint into a variable for use later in the build or release pipeline.
The task performs the following actions:
- Download secure file to server by name using the Download Secure Files Task. This downloaded the file to a location stored in
- Load certificate in powershell and retrieve certificate thumbnail, and assign to specified return variable
- Use password variable to install certificate into the specified local store
cert.name - name of certificate file
cert.Passphrase - password for certificate
cert.Store - name of the certificate store to place the certificate. ie.
cert.thumbprintVariableName - The output variable to store the certificate thumbprint in
To make the script reusable, it needs to be placed in a task group, which will then expose the variables as input properties. If the script is included as a powershell step straight into the pipeline, it will use pipeline varaibles directly limiting to a single certificate.