Optionally pass the individual enrollment cert expiry duration

Azure-Samples · Nov 8, 2019 · 9100254 · 9100254
1 parent 1a373eb
commit 9100254
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/provisioning/Samples/device/X509Sample/GenerateTestCertificate.ps1 b/provisioning/Samples/device/X509Sample/GenerateTestCertificate.ps1
@@ -23,10 +23,11 @@ https://github.com/azure/azure-iot-sdk-csharp
 #>
 
 Param(
-	$deviceName = "iothubx509device1"
+	$deviceName = "iothubx509device1",
+	$certificateValidityInYears = 1
 )
 
-$cert = New-SelfSignedCertificate -Type Custom -Subject "CN=$deviceName, O=TEST, C=US" -KeySpec Signature -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2") -CertStoreLocation "Cert:\CurrentUser\My"
+$cert = New-SelfSignedCertificate -Type Custom -Subject "CN=$deviceName, O=TEST, C=US" -KeySpec Signature -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2") -CertStoreLocation "Cert:\CurrentUser\My" -NotAfter (Get-Date).AddYears($certificateValidityInYears)
 
 Write-Host "Generated the certificate:"
 Write-Host $cert

diff --git a/provisioning/Samples/device/X509Sample/readme.md b/provisioning/Samples/device/X509Sample/readme.md
@@ -12,6 +12,10 @@ The sample code is set up to use X.509 certificates stored within a password-pro
 
 `powershell .\GenerateTestCertificate.ps1`
 
+You can optionally pass the DeviceID and generated certificate validity duration to the powershell script:
+
+`powershell .\GenerateTestCertificate.ps1 -deviceName "iothubx509device1" -certificateValidityInYears 10`
+
 The script will prompt for a PFX password. The same password must be used when running the sample.
 
 In your Device Provisioning Service go to "Manage enrollments" and select "Individual Enrollments".