PowerShell Scripts

Password Changing Scripts

Firstly, within Privilege Vault a powershell script can be a dependancy. This means you can configure Privilege Vault to execute a powershell script after a remote password change occurs. This PowerShell script runs on the Privilege Vault Server (or a distributed engine). More information can be found here.

Using secrets within remote powershell scripts

Password changing scripts only run on the Privilege Vault Server or Distribution Engine. There are times when you have PowerShell scripts running on other servers within your network, but you need access to a secret from Privilege Vault. To do that you can either use the Privilege Vault APIs to pull the secret via HTTP requests (click here for examples).

Or, you could use the Privilege Vault Software Development Kit for DevOps (click here) which gives you access to secrets via Command Line interface (CLI). You can then integrate a simple command into your PowerShell script to pull the secert.

For example:

$usn = .\path\to\tss secret -s 100 -f username;
$pwd = .\path\to\tss secret -s 100 -f password;

Set-SomePowerShellCommand -Username $usn -Password $pwd;