SqlCertForge.Audit

2.0.1

SqlCertForge (audit edition) -- READ-ONLY inventory and verification of SQL Server and Reporting Services (SSRS/PBIRS) certificate configuration: TLS bindings and HTTPS endpoints, estate-wide certificate inventory, TDE, backup encryption, mirroring/AG/Service Broker endpoint authentication, Always Encrypted column master keys, cell-level key hierarchies, PolyBase, and client trust. Reports what is configured; makes NO changes. The free/community surface; state-changing provisioning lives in the full SqlCertForge module. Changing certificates (bind, rotate, distribute trust) is in the paid SqlCertForge MCP from $79/month: https://detentpoint.com/sqlcertforge. The bundled stdio MCP server exposes all twelve commands as read-only tools via mcp\Start-SqlCertAuditMcp.ps1.

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name SqlCertForge.Audit

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name SqlCertForge.Audit

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

greenmtnsun

Package Details

Author(s)

Keith Ramsey

Functions

Get-RsHttpConfig Test-RsHttpsEndpoint Test-SqlCertBinding Test-RsCertBinding Get-SqlCertInventory Test-SqlTdeConfiguration Test-SqlBackupEncryptionReadiness Test-SqlEndpointCertAuth Test-SqlColumnMasterKey Test-SqlCellKeyHierarchy Test-SqlPolyBaseCertificate Test-SqlCertClientTrust

PSEditions

Desktop Core

Dependencies

This module has no dependencies.

Release Notes

v1.0.1: Clarified that state-changing tools (bind, rotate, distribute trust) require the paid SqlCertForge MCP ($79/month). This edition (v1.0.1) ships the twelve read-only audit commands and the stdio MCP server that exposes them as free tools. v2.0.0 baseline: the read-only audit edition includes twelve commands matching the read-only surface of the full SqlCertForge module and the v2.0.0 C# MCP. Every command is read-only and never throws -- a read error is reported as a Failed result, not an exception. Get-SqlCertInventory (estate-wide certificate inventory across engine, Reporting Services, TDE, backup, endpoint and cell surfaces, with expiry), Test-SqlTdeConfiguration, Test-SqlBackupEncryptionReadiness, Test-SqlEndpointCertAuth, Test-SqlColumnMasterKey, Test-SqlCellKeyHierarchy, Test-SqlPolyBaseCertificate, Test-SqlCertClientTrust, Get-RsHttpConfig, Test-RsHttpsEndpoint, Test-SqlCertBinding, Test-RsCertBinding. The DMV-backed checks read through the dbatools or SqlServer module when present and report a Failed result naming the missing provider when neither is; the registry, WMI and store checks have no such dependency. Safe against production. Runs on Windows PowerShell 5.1 and PowerShell 7. The bundled zero-dependency stdio MCP server exposes all twelve commands as read-only tools.

FileList

SqlCertForge.Audit.nuspec
Docs\Convert-MdToPdf.ps1
Docs\HOW-TO-USE-SQLCERTFORGE-AUDIT.gen.html
Docs\HOW-TO-USE-SQLCERTFORGE-AUDIT.md
Docs\HOW-TO-USE-SQLCERTFORGE-AUDIT.pdf
Docs\images\audit-vs-fix.svg
LICENSE
Private\Add-SqlCertConnectivityHint.ps1
Private\Get-BackupCertRow.ps1
Private\Get-CellCertRow.ps1
Private\Get-EndpointCertRow.ps1
Private\Get-RsCertRow.ps1
Private\Get-SqlCaCertificate.ps1
Private\Get-SqlCertFileThumbprint.ps1
Private\Get-SqlCertFromTargetStore.ps1
Private\Get-SqlEngineCertRow.ps1
Private\Get-SqlRsInstance.ps1
Private\Get-SqlRsRegisteredUrl.ps1
Private\Get-TdeCertRow.ps1
Private\Invoke-RsHttpProbe.ps1
Private\Invoke-SqlCertHttpBinding.ps1
Private\Invoke-SqlCertInventoryQuery.ps1
Private\Invoke-SqlRsCimBinding.ps1
Private\New-SqlCertInventoryRow.ps1
Private\New-SqlCertResult.ps1
Private\Resolve-SqlCertThumbprint.ps1
Private\Test-SqlCertDbatoolsAvailable.ps1
Private\Test-SqlCertInRootStore.ps1
Public\Get-RsHttpConfig.ps1
Public\Get-SqlCertInventory.ps1
Public\Test-RsCertBinding.ps1
Public\Test-RsHttpsEndpoint.ps1
Public\Test-SqlBackupEncryptionReadiness.ps1
Public\Test-SqlCellKeyHierarchy.ps1
Public\Test-SqlCertBinding.ps1
Public\Test-SqlCertClientTrust.ps1
Public\Test-SqlColumnMasterKey.ps1
Public\Test-SqlEndpointCertAuth.ps1
Public\Test-SqlPolyBaseCertificate.ps1
Public\Test-SqlTdeConfiguration.ps1
SqlCertForge.Audit.psd1
SqlCertForge.Audit.psm1
mcp\README.md
mcp\Start-SqlCertAuditMcp.ps1

Version History

Version	Downloads	Last updated
2.0.1 (current version)	6	10/29/2026
2.0.0	27	9/16/2026
1.0.0	23	8/26/2026