Overview

This project automates certificate lifecycle tasks for Scale clusters and endpoint trust deployment. It supports interactive generation, cluster API upload, SAN verification, trusted-root rollout, and deploy-only operations.

Key Capabilities

• Handles both production and DR clusters with a single certificate (each cluster can be single-node or 3-node)
• Certificate validity in years (interactive prompt, default 5)
• One certificate includes all cluster IPs you specify so it works for every node
• Cluster-level upload through the Scale API with thumbprint verification
• Trusted Root deployment to other Windows machines (unlimited list; blank line when done)
• Deploy-only mode (`-Deploy`) using an existing certificate file in the script folder

Output Artifacts

• scale_cert.pem - PEM certificate for Scale certificate field
• scale_private.key - RSA private key PEM for Scale key field
• scale_private.pfx - Password-protected Windows bundle
• scale_cert.crt - Public certificate for trusted-root rollout

Recommended Usage Flow

1. Run `Create_Scale_Cert.ps1` as administrator.
2. Generate and upload to cluster API targets.
3. Deploy trust to Windows endpoints as needed.
4. Use `-Deploy` later to reuse existing cert files for additional endpoint trust deployment.