Microsoft Outlines Early Progress on PowerShell Secrets Management -- Redmondmag.com

Microsoft Outlines Early Progress on PowerShell Secrets Management

By Kurt Mackie
02/06/2020

Microsoft described progress on its coming PowerShell Secrets Management Module in a Thursday announcement.

The module, seen as a better way to secure and share PowerShell scripts, was released late last month as an alpha test version in the PowerShell Gallery. It's currently just available for testing on Windows systems and isn't recommended for use in production environments. Support for Linux and macOS systems is planned, but not available.

General availability of the PowerShell Secret Management Module is targeted for "late spring/early summer 2020," according to Sydney Smith, a program manager with the PowerShell team, in the announcement.

The idea behind the module is that it has been difficult for organizations to manage secrets securely, especially when running scripts across heterogeneous cloud environments.

Developers writing scripts want them to run across different platforms, but that might involve handling multiple secrets and multiple secrets types. The team sees PowerShell serving as a connection point between different systems. Consequently, it built an abstraction layer in PowerShell that can be used to manage secrets, both with local vaults and remote vaults, Smith explained in a November Ignite talk.

The module helps manage local and remote secrets in unified way, Smith added. It might be used to run a script in various environments, where just the vault parameter would need to be changed. Scripts could be shared across an organization, and it wouldn't be necessary to know the local vaults of the various users. Keys could be shared with users in test environments, but deployment keys could be individualized. It would be less necessary to hard-code secrets into scripts.

The PowerShell Secret Management Module is being designed to work with various vault extensions. Microsoft is "leaving it up to the vault owners/users to help us build out that ecosystem." More information on this vault extension development work will get outlined in future PowerShell blog posts, Smith indicated.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.
Fallout from Microsoft's 'Midnight Blizzard' Saga Hits Feds

When the Russian attack group Midnight Blizzard successfully breached Microsoft corporate e-mail accounts late last year, it apparently managed to steal U.S. government agency e-mails, too.
PowerShell Script Used in Phishing Attack May Be AI-Generated

A PowerShell script being used in a novel malware campaign may have been created by AI, according to security researchers at Proofpoint.
Using Microsoft Office to Build a Network Diagram, Part 1

Keeping documentation is a great way to ease your future hardware refresh and have what you need for insurance purposes.
Microsoft Claims Breakthrough in Quantum Computing Reliability

A new paper details Microsoft's recent progress in quantum computing -- specifically, its development of a system that is both significantly less prone to errors and better at correcting them.