Update manifest and docs to 6.13.4

Author: gdbarron

CHANGELOG.md

@@ -1,3 +1,10 @@
+## 6.13.4
+- Add `New-VdcCredential` to create a Password, Username Password, or Certificate Credential
+- Add `Invoke-VcCertificateAction -Application` and `-IssuingTemplate` for use during renewal operations to override existing values from certificate request.  The template is optional if only 1 is associated to the application.
+- Enhance `Invoke-VcCertificateAction -Renew` to be smarter about determining the application and issuing template to use.  For example, if the only template on an application was replaced, use the new one for renewal.
+- Fix `Invoke-VcCertificateAction -Renew -Wait` which was not waiting depending on certain statuses.  Add automatic wait for renewal when provisioning afterwards.
+
+
 ## 6.13.3
 - Add `New-VcCertificate -Wait` to wait for the certificate request to reach ternminal status, either success or failure.  This is helpful when used with `-PassThru` to ensure a certificate is returned.  [#383](https://github.com/Venafi/VenafiPS/issues/383).
 
@@ -949,5 +956,6 @@ This is a major release.  Although every attempt has been made to be backwards c
 
 
 
+
 
 

VenafiPS/VenafiPS.psd1

@@ -3,7 +3,7 @@
 #
 # Generated by: Greg Brownstein
 #
-# Generated on: 03/12/2026
+# Generated on: 03/23/2026
 #
 
 @{
@@ -12,7 +12,7 @@
 RootModule = 'VenafiPS.psm1'
 
 # Version number of this module.
-ModuleVersion = '6.13.3'
+ModuleVersion = '6.13.4'
 
 # Supported PSEditions
 # CompatiblePSEditions = @()
@@ -113,7 +113,8 @@ FunctionsToExport = 'Add-VcTeamMember', 'Add-VcTeamOwner', 'Add-VdcAdaptableHash
                'Get-VcCloudProvider', 'Get-VcCloudKeystore', 'New-VcCloudKeystore',
                'Remove-VcCloudKeystore', 'New-VcCloudProvider',
                'Remove-VcCloudProvider', 'Set-VcUser', 'Export-VcReport',
-               'Get-VcCertificateAuthority', 'Set-VcIssuingTemplate', 'New-VdcCredential'
+               'Get-VcCertificateAuthority', 'Set-VcIssuingTemplate',
+               'New-VdcCredential'
 
 # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
 CmdletsToExport = @()

docs/changelog.md

@@ -1,3 +1,10 @@
+## 6.13.4
+- Add `New-VdcCredential` to create a Password, Username Password, or Certificate Credential
+- Add `Invoke-VcCertificateAction -Application` and `-IssuingTemplate` for use during renewal operations to override existing values from certificate request.  The template is optional if only 1 is associated to the application.
+- Enhance `Invoke-VcCertificateAction -Renew` to be smarter about determining the application and issuing template to use.  For example, if the only template on an application was replaced, use the new one for renewal.
+- Fix `Invoke-VcCertificateAction -Renew -Wait` which was not waiting depending on certain statuses.  Add automatic wait for renewal when provisioning afterwards.
+
+
 ## 6.13.3
 - Add `New-VcCertificate -Wait` to wait for the certificate request to reach ternminal status, either success or failure.  This is helpful when used with `-PassThru` to ensure a certificate is returned.  [#383](https://github.com/Venafi/VenafiPS/issues/383).
 
@@ -949,5 +956,6 @@ This is a major release.  Although every attempt has been made to be backwards c
 
 
 
+
 
 

docs/functions/Invoke-VcCertificateAction.md

@@ -19,9 +19,9 @@ Invoke-VcCertificateAction -ID <Guid> [-Recover] [-BatchSize <Int32>] [-Addition
 
 ### Renew
 ```
-Invoke-VcCertificateAction -ID <Guid> [-Renew] [-Provision] [-Wait] [-Force]
- [-AdditionalParameters <Hashtable>] [-VenafiSession <PSObject>] [-ProgressAction <ActionPreference>] [-WhatIf]
- [-Confirm] [<CommonParameters>]
+Invoke-VcCertificateAction -ID <Guid> [-Renew] [-Provision] [-Application <String>] [-IssuingTemplate <String>]
+ [-Wait] [-Force] [-AdditionalParameters <Hashtable>] [-VenafiSession <PSObject>]
+ [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
 ```
 
 ### Validate
@@ -65,26 +65,24 @@ Perform an action against 1 certificate
 
 ### EXAMPLE 2
 ```
-Invoke-VcCertificateAction -ID '3699b03e-ff62-4772-960d-82e53c34bf60' -Renew -AdditionalParameters @{'Application'='10f71a12-daf3-4737-b589-6a9dd1cc5a97'}
+Invoke-VcCertificateAction -ID '3699b03e-ff62-4772-960d-82e53c34bf60' -Renew -Application '10f71a12-daf3-4737-b589-6a9dd1cc5a97'
 ```
 
-Perform an action against 1 certificate with additional parameters.
-In this case we are renewing a certificate, but the certificate has multiple applications associated with it.
-Only one certificate and application combination can be renewed at a time so provide the specific application to be renewed.
+Perform an action against 1 certificate overriding the application used for renewal.
 
 ### EXAMPLE 3
 ```
-Find-VcCertificate -Version CURRENT -Issuer i1 | Invoke-VcCertificateAction -Renew -AdditionalParameters @{'certificateIssuingTemplateId'='10f71a12-daf3-4737-b589-6a9dd1cc5a97'}
+Find-VcCertificate -Version CURRENT -Issuer i1 | Invoke-VcCertificateAction -Renew -IssuingTemplate 10f71a12-daf3-4737-b589-6a9dd1cc5a97
 ```
 
-Find all current certificates issued by i1 and renew them with a different issuer.
+Find all current certificates issued by i1 and renew them with a different template.
 
 ### EXAMPLE 4
 ```
 Find-VcCertificate -Version CURRENT -Name 'mycert' | Invoke-VcCertificateAction -Renew -Wait
 ```
 
-Renew a certificate and wait for it to pass the Requested state (and hopefully Issued).
+Renew a certificate and wait for it to finish, either success or failure, before returning.
 This can be helpful if an Issuer takes a bit to enroll the certificate.
 
 ### EXAMPLE 5
@@ -174,8 +172,7 @@ Accept wildcard characters: False
 
 ### -Renew
 Requests immediate renewal for an existing certificate.
-If more than 1 application is associated with the certificate, provide -AdditionalParameters @{'Application'='application id'} to specify the id.
-Use -AdditionalParameters to provide additional parameters to the renewal request, see https://developer.venafi.com/tlsprotectcloud/reference/certificaterequests_create.
+Use \`-AdditionalParameters\` to provide additional parameters to the renewal request, see https://developer.venafi.com/tlsprotectcloud/reference/certificaterequests_create.
 
 ```yaml
 Type: SwitchParameter
@@ -253,7 +250,7 @@ Accept wildcard characters: False
 
 ### -Delete
 Delete a certificate.
-As only retired certificates can be deleted, this will be performed first.
+As only retired certificates can be deleted, this will be performed first, if needed.
 
 ```yaml
 Type: SwitchParameter
@@ -269,7 +266,8 @@ Accept wildcard characters: False
 
 ### -Provision
 By default, provision a certificate to all associated machine identities.
-When used with CloudKeystore, provision there instead.
+When used with -CloudKeystore, provision there instead.
+When used with -Renew, it will wait for the renewal to complete and then provision the renewed certificate, assuming the renewal was successful.
 
 ```yaml
 Type: SwitchParameter
@@ -310,6 +308,52 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -Application
+Optional name or ID of an application.
+Only needed in circumstances where the application can't be determined automatically.
+
+If not provided, get the application from the original certificate request.
+If not available, check for associated applications with the certificate. 
+If more than 1, throw an error as we don't know which to use, otherwise use that one application.
+
+Renew only.
+
+```yaml
+Type: String
+Parameter Sets: Renew
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IssuingTemplate
+Optional name or ID of an issuing template.
+Only needed in circumstances where the issuing template can't be determined automatically.
+
+If not provided, get the issuing template from the original certificate request. 
+It might be this is available, but no longer valid for the application. 
+In this case, check how many templates the application has. 
+If only 1, use it, otherwise we can't continue.
+If not available from the original certificate request, perform the same 1 template check against the application to find a suitable template.
+
+Renew only.
+
+```yaml
+Type: String
+Parameter Sets: Renew
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -BatchSize
 How many certificates to retire per retirement API call.
 Useful to prevent API call timeouts.
@@ -330,7 +374,7 @@ Accept wildcard characters: False
 
 ### -Wait
 Wait for a long running operation to complete before returning
-- During a renewal, wait for the certificate to pass the Requested state
+- During a renewal, wait for enrollment to either succeed or fail
 
 ```yaml
 Type: SwitchParameter
@@ -346,7 +390,7 @@ Accept wildcard characters: False
 
 ### -Force
 Force the operation under certain circumstances.
-- During a renewal, force choosing the first CN in the case of multiple CNs as only 1 is supported.
+- During a renewal, force choosing the first CN in the case of multiple CNs as only 1 is supported via the API.
 
 ```yaml
 Type: SwitchParameter
@@ -388,7 +432,7 @@ Aliases:
 
 Required: False
 Position: Named
-Default value: None
+Default value: (Get-VenafiSession)
 Accept pipeline input: False
 Accept wildcard characters: False
 ```
@@ -451,12 +495,19 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ###     certificateID - Certificate uuid
 ###     success - A value of true indicates that the action was successful
 ###     error - error message if we failed
+### Renewals will also have oldCertificateId and renew properties
 ## NOTES
 If performing a renewal and subjectCN has more than 1 value, only the first will be submitted with the renewal.
 
 ## RELATED LINKS
 
-[https://api.venafi.cloud/webjars/swagger-ui/index.html?configUrl=%2Fv3%2Fapi-docs%2Fswagger-config&urls.primaryName=outagedetection-service](https://api.venafi.cloud/webjars/swagger-ui/index.html?configUrl=%2Fv3%2Fapi-docs%2Fswagger-config&urls.primaryName=outagedetection-service)
+[https://developer.venafi.com/tlsprotectcloud/reference/certificateretirement_recovercertificates](https://developer.venafi.com/tlsprotectcloud/reference/certificateretirement_recovercertificates)
+
+[https://developer.venafi.com/tlsprotectcloud/reference/certificateretirement_retirecertificates](https://developer.venafi.com/tlsprotectcloud/reference/certificateretirement_retirecertificates)
+
+[https://developer.venafi.com/tlsprotectcloud/reference/certificateretirement_deletecertificates](https://developer.venafi.com/tlsprotectcloud/reference/certificateretirement_deletecertificates)
+
+[https://developer.venafi.com/tlsprotectcloud/reference/certificaterequests_create](https://developer.venafi.com/tlsprotectcloud/reference/certificaterequests_create)
 
-[https://api.venafi.cloud/webjars/swagger-ui/index.html?urls.primaryName=outagedetection-service#/Certificates/certificateretirement_deleteCertificates](https://api.venafi.cloud/webjars/swagger-ui/index.html?urls.primaryName=outagedetection-service#/Certificates/certificateretirement_deleteCertificates)
+[https://developer.venafi.com/tlsprotectcloud/reference/certificates_validation](https://developer.venafi.com/tlsprotectcloud/reference/certificates_validation)