v6.8.0

• Add Get-VenafiSession to centralize session management. For nested and/or piped functions, pull the session from the call stack.
• Add PolicyPath to Export-VdcCertificate output and Import-VdcCertificate -PolicyPath. This allows the imported certificate to be created in the same policy folder. This could be used to synchronize across environments for example. The addition of Import-VdcCertificate -Force will cause a policy path to be created if it does not already exist; policy subfolders are supported as well.
• Add Import-VcCertificate blocklist functionality. Override the blocklist by default and honor the blocklist if the environment variable VC_ENABLE_BLOCKLIST is set to true.
• Fix VC import failure with a large number of keystores, #322
• Hide dekEncryptedPassword from verbose output
• Remove Filename from Export-VdcCertificate when outputting data and not writing to a file

v6.7.4

• Add support for X509 (.pem, .cer, and .crt) to Import-VcCertificate. Both by path and by data are supported. Pull in a folder full of certificates or pipe from either TLSPDC or another TLSPC tenant.
• Add Find-VcCertificate -IsExpired
• Better support for exporting and importing certificates between TLSPDC and TLSPC via pipeline
• Fix bug with New-VcSearchQuery when a specific number of filters were provided

v6.7.3

• Add ability to import all certificates from a folder with Import-VcCertificate -Path
• Fix parameter set issue where -PrivateKeyPassword could not be provided with Import-VcCertificate -Path
• Fix #315, appending certificate id to exported file name

v6.7.2

• Fix API parameter in Import-VdcCertificate, #316
• Fix Invalid JSON response in Find-VdcObject, #318

v6.7.1

• Update New-VcCertificate -IssuingTemplate to allow an alias to be provided, #313. -IssuingTemplate is now also optional if the application only has 1 associated template.
• Add Set-VcCertificateRequest -RejectReason to specify a reason for rejection. The default is 'Rejection processed by VenafiPS'.

v6.7.0

• Add Set-VcCertificateRequest to approve requests. Optionally, use -Wait for the certificate to be issued and certificate details to be available.
• Add Initialize-PSSodium -Force to force installation of the module if it doesn't exist. This is used by the new parameters Export-VcCertificate -Force, Import-VcCertificate -Force, New-VcMachine -Force, New-VcMachineCommonKeystore -Force, and New-VcMachineIis -Force.
• Update New-VcCertificate to retrieve default validity date from the issuing template instead of a set 90 days
• Fix Find-VdcCertificate -CountOnly error #309
• Updates to better facilitate moving certificates/keys between environments.
  • Update Export-VcCertificate -PKCS12 to allow exporting to base64 in addition to a file.
  • Add standard names for Format in return objects in TLSPC and TLSPDC.
  • Add PrivateKeyPasswordCredential in return objects to keep from having to provide again further down the pipeline
• Add Invoke-VcGraphQL for queries and mutations. This isn't used for too much as of now, but the framework is here for when it's needed.
• Update Get-VcData to use Invoke-VcGraphQL for Application and Team id and names. Quite often we are just converting names into IDs so graphql should give us a performance bump as opposed to the REST api.
• Deprecated Add-VcCertificateAssociation

v6.6.1

• Fix bogus error during New-VcMachineCommonKeystore #304
• Update VC machine creation components due to API deprecation

v6.6.0

• Add Get-VcSatelliteWorker, either all, by id or all workers associated with a specific satellite
• Add Remove-VcSatelliteWorker, you guessed it...removes vsat workers
• Add Get-VcSatellite -IncludeWorkers to get vsats and their associated workers in one call.
• Add Invoke-VcCertificateAction -Provision to push a certificate to associated machine identities. You can also use -Renew -Provision together and it will renew and then provision the new certificate.
• Add Set-VcApplication -IssuingTemplate to add one or more issuing templates to an application. It will overwrite by default or use -NoOverwrite to append.

v6.5.2

• Add Set-VcCertificate. This replaces Add-VcCertificateAssociation to set the applications associated with a certificate. Certificate tagging is now supported, both add and replace.
• Add support for URL port during TLSPDC token operations, #305

v6.5.1

• Fix Find-VdcObject documentation page not building, #302
• Rebranding post CyberArk acquisition
• Add specific exception types when working with invalid paths or access issues on VDC objects