Skip to content
PowerShell Commands

Get-PfxCertificate

Get-PfxCertificate [-FilePath*] <String[]> [<CommonParameters>]
Get-PfxCertificate -LiteralPath* <String[]> [<CommonParameters>]

The Get-PfxCertificate cmdlet gets an object representing each specified .pfx certificate file. A .pfx file includes both the certificate and a private key.

Parameters

-FilePath <String[]>

  • This value is required
  • Default value is None
  • Accepts pipeline input ByPropertyName

Specifies the full path to the .pfx file of the secured file. If you specify a value for this parameter, it is not necessary to type `-FilePath` at the command line.

-LiteralPath <String[]>

  • This value is required
  • Default value is None
  • Accepts pipeline input ByPropertyName

The full path to the .pfx file of the secured file. Unlike FilePath , the value of the LiteralPath parameter is used exactly as it is typed. No characters are interpreted as wildcards. If the path includes escape characters, enclose it in single quotation marks. Single quotation marks tell Windows PowerShell not to interpret any characters as escape sequences.

<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,ErrorAction, ErrorVariable, WarningAction, WarningVariable,OutBuffer, PipelineVariable, and OutVariable.

Inputs
System.String
You can pipe a string that contains a file path to Get-PfxCertificate .
Outputs
System.Security.Cryptography.X509Certificates.X509Certificate2
Get-PfxCertificate returns an object for each certificate that it gets.
Examples
  1. Get a .pfx certificate: 
    PS C:\> Get-PfxCertificate -FilePath "C:\windows\system32\Test.pfx"
Password: ******
Signer Certificate:      David Chew (Self Certificate) Time Certificate: Time Stamp: Path:                    C:\windows\system32\zap.pfx

    This command gets information about the Test.pfx certificate on the system.

  2. Get a .pfx certificate from a remote computer: 
    PS C:\> Invoke-Command -ComputerName "Server01" -ScriptBlock {Get-PfxCertificate -FilePath "C:\Text\TestNoPassword.pfx}" -authentication CredSSP

    This command gets a .pfx certificate file from the Server01 remote computer. It uses Invoke-Command to run a Get-PfxCertificate command remotely.

    When the .pfx certificate file is not password-protected, the value of the Authentication parameter of Invoke-Command must be CredSSP.

Additional Notes
 When using the Invoke-Command cmdlet to run a Get-PfxCertificate command remotely, and the .pfx certificate 
 file is not password protected, the value of the Authentication parameter of Invoke-Command * must be CredSSP.

 *

This work is licensed under a Creative Commons Attribution 4.0 International. It is attributed to Microsoft Corporation and can be found here.

PowerShell Commands