SCOM Certificate Checker Script

Posted by : on

troubleshooting   certificates   guides   operationsManager   powershell

:book: Introduction

This tool will allow you to check your SCOM Certificate. It is very efficient and has been improved upon over time. You may edit line 751 to allow you to change what happens when you run from Powershell ISE. Copying and pasting the script to Powershell ISE after you run MOMCertImport on a certificate is the most common way to run the script, which requires no arguments or modifications. Just run the script and you will see where the issue may be.

:memo: Authors

  • Tyson Paul (https://monitoringguys.com/)
  • Lincoln Atkinson (https://latkin.org/blog/)
  • Mike Kallhoff
  • Blake Drumm (https://blakedrumm.com/)

:page_with_curl: Where to get it

Test-SCOMCertificate.ps1 :arrow_left: Direct Download Link
or
Personal File Server - Test-SCOMCertificate.ps1 :arrow_left: Alternative Download Link
or
Personal File Server - Test-SCOMCertificate.txt :arrow_left: Text Format Alternative Download Link

:classical_building: Argument List

Argument List  Description 
-All  Check All Certificates in Local Machine Store. 
-Servers  Each Server you want to Check SCOM Certificates on. 
-SerialNumber  Check a specific Certificate serial number in the Local Machine Personal Store. Not reversed. 
-OutputFile  Where to Output the File (txt, log, etc) for Script Execution. 

:question: Examples

Example 1

Check the certificate you have currently configured for SCOM on the local machine:

  PS C:\> .\Test-SCOMCertificate.ps1

Example 2

Check for a specific Certificate Serial number in the Local Machine Personal Certificate store:

  PS C:\> .\Test-SCOMCertificate.ps1 -SerialNumber 1f00000008c694dac94bcfdc4a000000000008

Example 3

Check all certificates on the local machine:

  PS C:\> .\Test-SCOMCertificate.ps1 -All

Example 4

Check All Certificates on 4 Servers and outputting the results to C:\Temp\Output.txt:

  PS C:\> .\Test-SCOMCertificate.ps1 -Servers ManagementServer1, ManagementServer2.contoso.com, Gateway.contoso.com, Agent1.contoso.com -All -OutputFile C:\Temp\Output.txt

Example of Failure

Picture of an example of the script failing

Page Views


Share on:
About Blake Drumm
Blake Drumm

I like to collaborate and work on projects. My skills with Powershell allow me to quickly develop automated solutions to suit my customers, and my own needs.

Email :

Website :

About Blake Drumm

My name is Blake Drumm, I am working on the Azure Monitoring Enterprise Team with Microsoft. Currently working to update public documentation for System Center products and write troubleshooting guides to assist with fixing issues that may arise while using the products. I like to blog on Operations Manager and Azure Automation products, keep checking back for new posts. My goal is to post atleast once a month if possible.

Follow @blakedrumm
Useful Links