Log into /TPAM to get started:
1. Go to “Systems, Accounts & Collections” | “Systems” | “Manage Systems”
2. Find the managed system that you want to reset passwords on
3. Click the “Details” | “Management” tab
4. In this walk through, TPAM is the certificate issuer, however, you can choose any step you want.
a. Under “Profile Notification Certificate” click “Created by TPAM”
b. Click “Download TPAM Root Cert.” and save this file
c. Enter a password into the “Password” and “Confirm Password” field
5. Once saved, go back to the “Management” tab
6. Copy and Save the “Thumbprint” for use later
7. Click “Download Certificate” and save a copy
Open the Certificate MMC Console
8. On the system that will run the commands, open an MMC Console (Click “Start”, “RUN” and type
“MMC”)
9. Click “File” | “Add/Remove Snap‐in”
10. Select “Certificates” and click “Add”
11. Select “My User Account” from the popup window and click “Finish”
12. Click “Ok” to close the window.
13. Expand “Certificates – Current User”
To Import the TPAM Root Certificate
14. Right Click on “Trusted Root Certification Authorities” and select “All Tasks” | “Import”
15. Click “Next”
16. Click “Browse” and select the “TPAM Root Cert” downloaded earlier (Usually named “parRootCA”)
and click “Open”.
17. Click “Next” | “Next” | “Finish” to complete the import.
18. Click “Ok” when the Import Wizard success message appears
To Import the System Certificate
19. Right Click on “Personal” and select “All Tasks” | “Import”
20. Click “Next”
21. Click “Browse” and change the certificate type from “X.509” to “Personal Information Exchange” or
“All Files”.
22. Click “Open” on the certificate downloaded earlier, then click “Next
23. Enter the password used when generating the certificate in TPAM
24. Click “Next” | “Next” | “Finish” to complete the import.
25. Click “Ok” when the Import Wizard success message appears
Open Powershell to run command
You can do this using any program or scripting method, but this is an easy demo:
26. On the system that will run the commands, open a PowerShell session (Click “Start”, “RUN” and type “powershell”)
27. Type the command:
Invoke‐RestMethod –Uri https://IP_or_DNS:9443/available ‐CertificateThumbprint
Success!!!