Skip to content

Commit f06aee0

Browse files
authored
Merge pull request #127259 from Jaxelr/patch-1
Update how to sign ci policy on trusted signing
2 parents 99c36ab + 8816078 commit f06aee0

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

articles/trusted-signing/how-to-sign-ci-policy.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ To complete the steps in this article, you need:
2020
- A Trusted Signing account, identity validation, and certificate profile.
2121
- Individual or group assignment of the Trusted Signing Certificate Profile Signer role.
2222
- [Azure PowerShell in Windows](/powershell/azure/install-azps-windows) installed.
23-
- [Az.CodeSigning](/powershell/module/az.codesigning/) module downloaded.
23+
- [Az.TrustedSigning](/powershell/module/az.trustedsigning/) module downloaded.
2424

2525
## Sign a CI policy
2626

@@ -36,40 +36,40 @@ To complete the steps in this article, you need:
3636
}
3737
```
3838

39-
1. Get the [root certificate](/powershell/module/az.codesigning/get-azcodesigningrootcert) that you want to add to the trust store:
39+
1. Get the [root certificate](/powershell/module/az.trustedsigning/get-aztrustedsigningcertificateroot) that you want to add to the trust store:
4040

4141
```powershell
42-
Get-AzCodeSigningRootCert -AccountName TestAccount -ProfileName TestCertProfile -EndpointUrl https://xxx.codesigning.azure.net/ -Destination c:\temp\root.cer
42+
Get-AzTrustedSigningCertificateRoot -AccountName TestAccount -ProfileName TestCertProfile -EndpointUrl https://xxx.codesigning.azure.net/ -Destination c:\temp\root.cer
4343
```
4444

4545
If you're using a *metadata.json* file, run this command instead:
4646

4747
```powershell
48-
Get-AzCodeSigningRootCert -MetadataFilePath C:\temp\metadata.json https://xxx.codesigning.azure.net/ -Destination c:\temp\root.cer
48+
Get-AzTrustedSigningCertificateRoot -MetadataFilePath C:\temp\metadata.json -Destination c:\temp\root.cer
4949
```
5050

51-
1. To get the Extended Key Usage (EKU) to insert into your policy:
51+
1. To get the [Extended Key Usage (EKU)](/powershell/module/az.trustedsigning/get-aztrustedsigningcustomereku) to insert into your policy:
5252

5353
```powershell
54-
Get-AzCodeSigningCustomerEku -AccountName TestAccount -ProfileName TestCertProfile -EndpointUrl https://xxx.codesigning.azure.net/
54+
Get-AzTrustedSigningCustomerEku -AccountName TestAccount -ProfileName TestCertProfile -EndpointUrl https://xxx.codesigning.azure.net/
5555
```
5656

5757
If you're using a *metadata.json* file, run this command instead:
5858

5959
```powershell
60-
Get-AzCodeSigningCustomerEku -MetadataFilePath C:\temp\metadata.json
60+
Get-AzTrustedSigningCustomerEku -MetadataFilePath C:\temp\metadata.json
6161
```
6262

63-
1. To sign your policy, run the `invoke` command:
63+
1. To [sign your policy](/powershell/module/az.trustedsigning/invoke-aztrustedsigningcipolicysigning), run the `invoke` command:
6464

6565
```powershell
66-
Invoke-AzCodeSigningCIPolicySigning -accountName TestAccount -profileName TestCertProfile -endpointurl "https://xxx.codesigning.azure.net/" -Path C:\Temp\defaultpolicy.bin -Destination C:\Temp\defaultpolicy_signed.bin -TimeStamperUrl: http://timestamp.acs.microsoft.com
66+
Invoke-AzTrustedSigningCIPolicySigning -accountName TestAccount -profileName TestCertProfile -endpointurl "https://xxx.codesigning.azure.net/" -Path C:\Temp\defaultpolicy.bin -Destination C:\Temp\defaultpolicy_signed.bin -TimeStamperUrl: http://timestamp.acs.microsoft.com
6767
```
6868

6969
If you're using a *metadata.json* file, run this command instead:
7070

7171
```powershell
72-
Invoke-AzCodeSigningCIPolicySigning -MetadataFilePath C:\temp\metadata.json -Path C:\Temp\defaultpolicy.bin -Destination C:\Temp\defaultpolicy_signed.bin -TimeStamperUrl: http://timestamp.acs.microsoft.com
72+
Invoke-AzTrustedSigningCIPolicySigning -MetadataFilePath C:\temp\metadata.json -Path C:\Temp\defaultpolicy.bin -Destination C:\Temp\defaultpolicy_signed.bin -TimeStamperUrl: http://timestamp.acs.microsoft.com
7373
```
7474

7575
## Create and deploy a CI policy

0 commit comments

Comments
 (0)