PowerShell

For the following use cases, this section lists the minimum permissions required for the AppViewX Windows Gateway to communicate with the CAs via PowerShell.

Important:
  • Log on locally is needed to impersonate the user, to prevent execution of arbitrary scripts or commands on a remote Windows machine without proper authentication or authorization.
  • When onboarding Microsoft Certificate Authority (MSCA) using PowerShell communication mode with minimum required permissions, it is recommended to skip the RPC and WinRM service status checks. These checks may require additional privileges that are not essential for minimal MSCA onboarding.
    This can be achieved by updating the Windows Gateway configuration file and modifying the PowerShell validation settings as shown below:
    <add key="POWERSHELL" value="Windows Gateway Reachability,User Validation,WinRM Configuration,CA Discovery Test" />