PowerShe 使用证书签名 ll脚本
1.创建自签名证书(如需要)
1 PS C:\Windows\system32> New-SelfSignedCertificate -DnsName www.mycard.com -CertStoreLocation Cert:\CurrentUser\My 2 3 目录: Microsoft.PowerShell.Security\Certificate::CurrentUser\My 4 5 Thumbprint Subject 6 ---------- ------- 7 313C6D95807E577BBD62D3F0A31077C911B72EB6 CN=www.mycard.com
2.获取证书
1 PS C:\Windows\system32> Get-PSDrive 2 Name Used (GB) Free (GB) Provider Root 3 ---- --------- --------- -------- ---- 4 Alias Alias 5 C 44.32 16.86 FileSystem C:\ 6 Cert Certificate \
1 PS C:\Windows\system32> dir Cert:\CurrentUser\My -OutVariable x 2 目录: Microsoft.PowerShell.Security\Certificate::CurrentUser\My 3 4 Thumbprint Subject 5 ---------- ------- 6 C744543541A7B9E5E0085F38351727765A716415 CN=domain\user 7 313C6D95807E577BBD62D3F0A31077C911B72EB6 CN=www.mycard.com
1 PS C:\Windows\system32> $x[0] 2 目录: Microsoft.PowerShell.Security\Certificate::CurrentUser\My 3 4 Thumbprint Subject 5 ---------- ------- 6 C744543541A7B9E5E0085F38351727765A716415 CN=domain\user
3.脚本签名前后
a)签名前
PS C:\Windows\system32> cat E:\1.ps1
Get-Variable
b)签名
1 PS C:\Windows\system32> Set-AuthenticodeSignature -Certificate $x[0] -FilePath 'E:\1.ps1' 2 目录: E:\ 3 SignerCertificate Status Path 4 ----------------- ------ ---- 5 FBD0E44E1011C4C992CD5004D73137A3EC0E5AE4 Valid 1.ps1
c)签名后
1 PS C:\Windows\system32> cat E:\1.ps1 2 Get-Variable 3 # SIG # Begin signature block 4 # MIIHfgYJKoZIhvcNAQcCoIIHbzCCB2sCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB 5 # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR 6 # AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUFo/Es9HHBQSTlqXXU6T/dWK2 7 # l7KgggV6MIIFdjCCBF6gAwIBAgIKE3B1nwAAAABmQDANBgkqhkiG9w0BAQUFADBA 8 # MRMwEQYKCZImiZPyLGQBGRYDY29tMRUwEwYKCZImiZPyLGQBGRYFY25wZGMxEjAQ 9 # BgNVBAMTCUNOUERDY2VydDAeFw0xNDExMjAwMzI5MzhaFw0xNTExMjAwMzI5Mzha 10 # MHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFTATBgoJkiaJk/IsZAEZFgVjbnBkYzEV 11 # MBMGA1UECxMMUHJpdmF0ZUNsb3VkMQ8wDQYDVQQLEwZDb21tb24xEDAOBgNVBAsT 12 # B0FjY291bnQxEDAOBgNVBAMTB3NwYWRtaW4wgZ8wDQYJKoZIhvcNAQEBBQADgY0A 13 # MIGJAoGBAJbTBOSiC0gfzz0Nd+KfSL/1Ct2T3WNn6B/8/KKHp8moNQ5kQ/l3YTJP 14 # a/bnmldT+JjJb4+2xiXZPZjlsq6I1HgX3LA34/eexORtyhcqB7mFlM70jO+PIw1c 15 # QjB9e0gtXghWshN7f3NpfEI/9WEgZx05MoDCG2y/PiPHSnVGVmm7AgMBAAGjggK8 16 # MIICuDALBgNVHQ8EBAMCB4AwJQYJKwYBBAGCNxQCBBgeFgBDAG8AZABlAFMAaQBn 17 # AG4AaQBuAGcwHQYDVR0OBBYEFHxUArZcQ8ZogC8gukXPkqk2M0SaMB8GA1UdIwQY 18 # MBaAFEIyEaRnajbL+TplBvaCT4ejW5bsMIH0BgNVHR8EgewwgekwgeaggeOggeCG 19 # gaxsZGFwOi8vL0NOPUNOUERDY2VydCxDTj13YWFjYSxDTj1DRFAsQ049UHVibGlj 20 # JTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixE 21 # Qz1jbnBkYyxEQz1jb20/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29i 22 # amVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50hi9odHRwOi8vd2FhY2EuY25w 23 # ZGMuY29tL0NlcnRFbnJvbGwvQ05QRENjZXJ0LmNybDCCAQYGCCsGAQUFBwEBBIH5 24 # MIH2MIGmBggrBgEFBQcwAoaBmWxkYXA6Ly8vQ049Q05QRENjZXJ0LENOPUFJQSxD 25 # Tj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1 26 # cmF0aW9uLERDPWNucGRjLERDPWNvbT9jQUNlcnRpZmljYXRlP2Jhc2U/b2JqZWN0 27 # Q2xhc3M9Y2VydGlmaWNhdGlvbkF1dGhvcml0eTBLBggrBgEFBQcwAoY/aHR0cDov 28 # L3dhYWNhLmNucGRjLmNvbS9DZXJ0RW5yb2xsL3dhYWNhLmNucGRjLmNvbV9DTlBE 29 # Q2NlcnQuY3J0MBMGA1UdJQQMMAoGCCsGAQUFBwMDMCwGA1UdEQQlMCOgIQYKKwYB 30 # BAGCNxQCA6ATDBFzcGFkbWluQGNucGRjLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEA 31 # V6r7xoyewB2qs8aV/eZ9maOUgbn9edi/+4x5meNTc4hHRJQdEel0Ypz+9byxF23t 32 # OlIsQdqF0ylnsejy8xDiZl66VbWpMf+lqlMzgepZ5g2iraRIzf9OPA1mpCoexLog 33 # 7VmfFcLy+pNaU7Swr41Qev9bXF3DvqCh6GKYEiCnzAjwvDLiBp6jfF8ZlE7JpHQI 34 # kHvHb1hbxtadgcyqSofD0Gp7IIcO9MelaOUWw13gXFrHNvTW1SAKrCidlPoP/no9 35 # tYEOXhth+Nv5uBVBZwlTw9nAHcg+pjg+9pITfiQih4C+aes3nl58YBXDaXbMz+rv 36 # OQDWjRExCHV20WulypLqfzGCAW4wggFqAgEBME4wQDETMBEGCgmSJomT8ixkARkW 37 # A2NvbTEVMBMGCgmSJomT8ixkARkWBWNucGRjMRIwEAYDVQQDEwlDTlBEQ2NlcnQC 38 # ChNwdZ8AAAAAZkAwCQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwxCjAIoAKAAKEC 39 # gAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwG 40 # CisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFHwOQIGZoxKLrIov7cZ1wBhrMA57 41 # MA0GCSqGSIb3DQEBAQUABIGAEmp+D25Uxjxuof3PzPuOagbWurKjYYnds8ThTCuj 42 # lswYU6DMnXyp37HLbl0tvNMYnXk71GUX/p4KC/EN9RDUWtipZUrCtydwlfPQPEAw 43 # KGaz0eKD0h2TAwLliTcHRM+WhjgSur2N5Or4z3EXCca8mJjesVZJj5eZfNPK97sX 44 # TeU= 45 # SIG # End signature block