Trusted Publishers certificates Discovery

Microsoft.Certificates.Discovery.CertificateGroup.TrustedPublishers (Discovery)

Discovers certificates from Trusted Publishers Store.

Knowledge Base article:

Element properties:

Object Discovery Details:

Member Modules:

Source Code:

<Discovery ID="Microsoft.Certificates.Discovery.CertificateGroup.TrustedPublishers" Enabled="true" Target="Microsoft.Certificates.CertificateGroup.TrustedPublishers" ConfirmDelivery="true" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryRelationship TypeID="SCIG!Microsoft.SystemCenter.InstanceGroupContainsEntities"/>

  </DiscoveryTypes>

  <DataSource ID="Microsoft.Certificates.TrustedPublishersGroupPopulator" TypeID="SC!Microsoft.SystemCenter.GroupPopulator">

    <RuleId>$MPElement$</RuleId>

    <GroupInstanceId>$MPElement[Name="Microsoft.Certificates.CertificateGroup.TrustedPublishers"]$</GroupInstanceId>

    <MembershipRules>

      <MembershipRule>

        <MonitoringClass>$MPElement[Name="Microsoft.Certificates.Certificate"]$</MonitoringClass>

        <RelationshipClass>$MPElement[Name="SCIG!Microsoft.SystemCenter.InstanceGroupContainsEntities"]$</RelationshipClass>

        <Expression>

          <Contained>

            <MonitoringClass>$MPElement[Name="Microsoft.Certificates.Store"]$</MonitoringClass>

            <Expression>

              <Or>

                <Expression>

                  <SimpleExpression>

                    <ValueExpression>

                      <Property>$MPElement[Name="Microsoft.Certificates.Store"]/StoreNameInternal$</Property>

                    </ValueExpression>

                    <Operator>Equal</Operator>

                    <ValueExpression>

                      <Value>TrustedPublisher</Value>

                    </ValueExpression>

                  </SimpleExpression>

                </Expression>

                <Expression>

                  <RegExExpression>

                    <ValueExpression>

                      <Property>$MPElement[Name="Microsoft.Certificates.Store"]/StoreNameInternal$</Property>

                    </ValueExpression>

                    <Operator>ContainsSubstring</Operator>

                    <Pattern>\TrustedPublisher</Pattern>

                  </RegExExpression>

                </Expression>

              </Or>

            </Expression>

          </Contained>

        </Expression>

      </MembershipRule>

    </MembershipRules>

  </DataSource>

</Discovery>