Provisioning: Add Root Certificate update for Windows

Windows usually updates certificates once a week, but due
to disabling Windows background updates there is need to
install and update certificates manually.

Updating certificates during provisioning is selected method
as it's aligned with the same procedure how linux machines have
handled the same.

Task-number: QTQAINFRA-7001
Pick-to: 6.9 6.8 5.15
Change-Id: I7c077b5e08328b12c481a3501736f06baf85e71e
Reviewed-by: Oliver Wolff <oliver.wolff@qt.io>
Reviewed-by: Matti Paaso <matti.paaso@qt.io>
This commit is contained in:
Tero Heikkinen
2025-03-14 08:25:06 +02:00
parent cf026224dd
commit ebcc9a1d10
8 changed files with 19 additions and 0 deletions

View File

@@ -0,0 +1,12 @@
# Copyright (C) 2025 The Qt Company Ltd.
# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
# This script updates Windows Root Certifications which are usually updated weekly by Windows update
. "$PSScriptRoot\helpers.ps1"
$sstCerts = "C:\Windows\Temp\certificates.sst"
Run-Executable "certutil.exe" "-generateSSTFromWU $sstCerts"
$sstCertsPath = (Get-ChildItem -Path $sstCerts)
$sstCertsPath | Import-Certificate -CertStoreLocation "Cert:\LocalMachine\Root" | Out-String | Measure-Object -Line
Remove-Item -Path $sstCerts

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"