Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SPFarm: Add SPServerCertificatePipeBind Support for the Central Administration with SPSE #1436

Open
ChristophHannappel opened this issue Apr 16, 2024 · 1 comment

Comments

@ChristophHannappel
Copy link
Contributor

Problem description

SharePoint Subscrioption Edition added a few Parameters for the SPCentralAdministration Commands. The Parameter -Certificate is one of them. In conjunction with the Parameter HostHeader, UseServerNameIndication, AllowLegacyEncryption and Url it is now possible to create a Central Administration with an Certificate Binding and a URL of your choosing.
Also with the benefit, that a .Provision() on the Webapplication or a psconfig run does not revert the URL to the default or removes the Binding from IIS.
Also you could run two or more instances of the Central Administration behind a Loadbalancer

Currently this is not possible with the SPFarm Ressource.

Verbose logs

-

DSC configuration

-

Suggested solution

In order to achieve this the following Steps would be required:

  • Test if the Cerfificate is imported before running the New-SPCentralAdministration or Set-SPCentralAdministration Command and Import it if necessary
  • Expand the Parameters for the SPCentralAdministration Commands
  • Expand the Ressource with the Addional Parameters

I'd be happy to work on a pull request.
I'm a bit concerend that this might get in conflict with the existing SPCertificate Ressource, but also could reuse the existing code :)
Also I'm happy about feedback and if this enhanced fits in.

SharePoint version and build

-

Operating system the target node is running

-

PowerShell version and build the target node is running

-

SharePointDsc version

-
@ChristophHannappel
Copy link
Contributor Author

As an alternative a new Ressource SPCentralAdministration would be possible. Which could be used after SPFarm and SPCertificate. The Ressource would just contain the Certificate and AllowLegacyEncryption Parameter.

Also the Hostheader Parameter would be added to SPFarm.
One thing about SPFarm - the reprovisioning of the Central Admin should be done with Set-SPCentralAdministration on SPSSE.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant