Running PowerShell script for Entra ID app registration

You need to complete the steps on the Add Permissions to the App Registration page before starting the steps on this page.

Important: After downloading the script you need to rename the file extension to .ps1 before you run it.

Use this PowerShell script to generate a certificate and private key that can be used to connect your Entra ID app registration to SaaS Backup.

Supported Formats:

• The certificate can have the following formats: CRT, CER, PEM.
• The private key must be in the KEY format.

1. Open PowerShell on your PC as an Administrator.
3. 
2. Enable execution of PowerShell scripts on your PC with the following command:
3. Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
5. 
6. Note: If you exit PowerShell, you will have to run this command again to run scripts
3. Download the newest version of the script from: https://help.keepit.com/helpdesk/attachments/6196263740 and save it to a preferred location and navigate to that location.
4. For example: C:\Users\(Your username)\Documents\Multiapp and then change directories to that location by typing:
5. cd C:\Users\(Your user name)\Documents\Multiapp
7. 
4. Rename the file extension to .ps1 and run the following command:
5. ./generate-self-signed-cert.ps1
7. 
5. Enter the PubKeyFileName with a .key at the end (see image below) and click Enter.
6. Note: You will need this name in the next steps:
8. 
6. Enter the PriveKeyFileName with a .key at the end then click Enter.
8. 
7. Enter the Certificate file name with an .cer extension.
9. 
8. Enter the following information as prompted:
• Country Name (2 letter code) [AU]:
• State or province name (full name) [Your-State]:
• Locality Name (eg, city):
• Organization Name (eg, company) [Internet Widgits Pty Ltd]:
• Organization Unit Name (eg, section) [Engineering]:
• Common Name (e.g. server FQDN or YOUR name) [foo.org]:
• Email address [foo@bar.baz]:
• Note: The example email address [foo@bar.baz] represents the email address dedicated to your tenant. This can include a service account.
10. 
11. When all the information is entered, the certificate will be generated and saved in the location where the script was saved.
13. 

Go to the Using Your Own Certificate page and complete the steps on that page as applicable.