Invoke-IISCrypto

Description

Checks or updates the Windows settings that control secure connections, using IIS Crypto templates.

You can:

A setting that shows a value of null has not been changed. Windows is still using its default for that setting.

To apply a template, provide one of the following locations:

Prebuilt and custom templates are described in the Custom Templates section of this page: https://www.nartac.com/Products/IISCrypto

Applying a template may require a restart. Use AllowReboot to restart automatically, or restart the computer yourself afterwards.

View the current IISCrypto configuration:

.\Invoke-IISCrypto.ps1 -Audit

Apply a template from a URL:

.\Invoke-IISCrypto.ps1 -ApplyTemplate -TemplateSource 'https://templateurl.com/template.ictpl'

Apply a template from a network share and allow an automatic restart:

.\Invoke-IISCrypto.ps1 -ApplyTemplate -TemplateSource '\\fileserver\share\template.ictpl' -AllowReboot

Apply a local template, choose the backup location, then view the new settings:

.\Invoke-IISCrypto.ps1 -ApplyTemplate -TemplateSource 'C:\Temp\template.ictpl' -Audit -RegistryBackupPath 'C:\Temp\backup.reg'

Existing calls that use -TemplateURL keep working. No changes are needed.

Parameter	Alias	Required	Default	Type	Description
`Audit`		False		Switch	Shows the current settings without changing anything
`ApplyTemplate`		False		Switch	Applies the template given by TemplateSource
`TemplateSource`	`TemplateURL`	Only with ApplyTemplate		String	Location of the template: a URL, network share, or local file
`AllowReboot`		False		Switch	Restarts the computer automatically after a template is applied
`RegistryBackupPath`		False	`backup.reg` (next to the script)	String	Where to save the copy of settings made before applying a template

Where to find results, logs, and errors:

Settings: shown when Audit is used. Each setting appears with a name and value.
Logs: .\Invoke-IISCrypto-log.txt
Errors: .\Invoke-IISCrypto-error.txt
Backup: a copy of the previous settings, saved as backup.reg next to the script unless RegistryBackupPath is set.

Renamed TemplateURL to TemplateSource. The old parameter name still works.
Templates can now come from a URL, a network share, or a local file.
Added AllowReboot to allow an automatic restart after applying a template.
Added RegistryBackupPath to choose where the settings backup is saved.
When Audit and ApplyTemplate are used together, the template is applied first and the new settings are then shown.