Cyware Orchestrate

Using Python Script: After replacing the placeholder values, run the following Python script either on Google Colab or locally to generate the certificate:

import os
import base64
import datetime
import json
import subprocess
# Replace the below parameters with a value
cert_pass = "CERT_PASSWORD"
days = 180
b64_path = "TEXT_FILE.txt"
public_key_cert_path = "CER_FILE.cer"
# Do not replace the values below
pfx_path = "certificate.pfx"
try:
    not_after = datetime.datetime.now() + datetime.timedelta(days=days)
    not_after_str = not_after.strftime("%Y-%m-%d %H:%M:%S")  
    subprocess.run([
        "openssl", "req", "-x509", "-newkey", "rsa:2048", "-nodes", "-keyout", "key.pem",
        "-out", "cert.pem", "-days", str(days),  
        "-subj", "/CN=localhost", 
    ], check=True, capture_output=True) 
    subprocess.run([
        "openssl", "pkcs12", "-export", "-in", "cert.pem", "-inkey", "key.pem",
        "-out", pfx_path, "-passout", f"pass:{cert_pass}"
    ], check=True, capture_output=True)
    subprocess.run([
        "openssl", "pkcs12", "-in", pfx_path, "-out", public_key_cert_path,
        "-nokeys", "-clcerts", "-password", f"pass:{cert_pass}"
    ], check=True, capture_output=True)
    with open(pfx_path, "rb") as f:
        file_content = f.read()
        base64_encoded = base64.b64encode(file_content).decode("utf-8") 
    with open(b64_path, "w") as f:
        f.write(base64_encoded)
    success_text = {"message": "Certificate created"}
    print(json.dumps(success_text))
except subprocess.CalledProcessError as e:
    print(f"OpenSSL Error: {e}") 
    print(f"Stdout: {e.stdout.decode()}")
    print(f"Stderr: {e.stderr.decode()}")
    print("An error occurred during certificate creation.")
except Exception as e:
    print(f"An error occurred: {e}")
finally: 
    try:
        os.remove("key.pem")
        os.remove("cert.pem")
    except FileNotFoundError:
        pass

Using PowerShell Script: After replacing the placeholder values, run the following PowerShell script locally on your system:

# Replace the below parameters with a value
$CertPass = "YOUR_CERTIFICATE_PASSWORD"
$Days = 180
$b64_path = "NAME_OF_THE_TEXT_FILE_TO_BE_SAVED"+".txt"
$public_key_cert_path = "NAME_OF_THE_CERTIFICATE"+".cer"
# Do not replace the values below

Install-Module -Name SelfSignedCertificate -Force
$pfx_path = "certificate.pfx"
Import-Module SelfSignedCertificate *> $null 2>&1
$Password = ConvertTo-SecureString $CertPass -AsPlainText -Force

$cmd_args = @{
    "OutCertPath" = $pfx_path
    "NotAfter"    = (Get-Date).AddDays($Days)
    "Password"    = $Password
}

try {
    New-SelfSignedCertificate @cmd_args -WarningAction:SilentlyContinue *> $null 2>&1
    openssl pkcs12 -in $pfx_path -out $public_key_cert_path -nokeys -clcerts -password pass:$CertPass *> $null 2>&1

    $File = [System.IO.File]::ReadAllBytes($pfx_path);
    $base_64_encoded = [System.Convert]::ToBase64String($File);
    [System.IO.File]::WriteAllText($b64_path, $base_64_encoded) *> $null 2>&1

    $success_text = "Certificate created" | ConvertTo-Json
    Write-Output($success_text) 
}
catch {

    Write-Error "An error occurred: $_" 

}

.cer: Public key

.pfx: Private key

.txt: Certificate content

Type: Application

Admin consent required: Yes

Status: Granted for <Your Organization>

Compliance Administrator

Exchange Administrator

Exchange Recipient Administrator

Global Administrator

Global Reader

Helpdesk Administrator

Security Administrator

Security Reader

Cert Password: Enter the password of the certificate file.

Organization: Enter your organization's primary domain to connect using certificate-based authentication (CBA) or managed identity. For example, orgname.com

App ID: Enter the application ID of the service principal you are using for certificate-based authentication (CBA). For example, 36ee4c6c-0812-40a2-b820-b22ebd02bce3

Certificate Content: Enter the content of the .txt file generated after running the certificate creation script.