PowerShell asking for Cred Objects even when using Certificate

[dms2701]

LM Parameters configured with API certificate. When running any command from module, PowerShell prompts for credential object. If credential request cancelled, script will return data as authenticated by user API certificate. Scripts therefore hang on any cmdlet as it sits waiting for a cred object.

[westforkfab]

Can you please provide an example? The initial configuration and some commands prompting the credential.
Thanks

[dms2701]

Something as simple as

Initialize-LmConnectionParameters -Address 1.1.1.1 -CertificateStoreLocation Cert:\LocalMachine\My -SubjectCN api
Get-LmAllParameters -Verbose

[westforkfab]

Not able to reproduce this issue. I download the .zip from GITHUB and I did the following steps:

Import-Module .\Kemp.LoadBalancer.Powershell
Initialize-LmConnectionParameters -SubjectCN certname -Address lmip

Later I run the following commands:

$lma = Get-LmParameter -Param version

$lma

ReturnCode Response                       Data                                    
---------- --------                       ----                                    
       200 Command successfully executed. @{version=7.2.xx.0.DEV-PRIVATE-xyz}

$lma = Get-LmAllParameters

$lma

ReturnCode Response                       Data             
---------- --------                       ----             
       200 Command successfully executed. @{AllParameters=}

If you did something different, please let us know.
Question: Which permissions did you grant to the user you're using ?

[dms2701]

I am not using a user account, but the certificate for authentication. When I cancel the Credential prompt in PowerShell, it still correctly outputs the data via authentication with the certificate. But, naturally, in scripts, this won't work, as it will just get stuck. The API user assigned to the certificate has "All Permissions". The API user has no local password specified (Option: "No Local Password"). So it should just work with the cert...

[dms2701]

Still no success with this - can anyone confirm similar behaviour?

[westforkfab]

The certificate you're using must be generate from a user defined in the LoadMaster. The certificate has to be converted in the pfx format and imported in your Windows box (current user/Personal/Certificates).
Check if you enabled the login method with Password or Certificate inside the Remote Access page (Certificates & Security > Remote Access).
If this does not work, can you please attach the log of your session? Thanks.

[dms2701]

All the above is done and set, still prompting for a credential object. What log are you after? There is nothing useful generated by the module.