Metadata Search Secrets

[dionrowney]

I am having trouble trying to determine how to query secrets with metadata.

I have secrets which have a metadata section and field boolean checkbox.

I need to use powershell to extract the secrets which have this value = true but am having troubles finding where to get the stored value from.

Is there any cmdlet that like Get-Secret | %{ Get-MetadataFieldValue -fieldname x -itemId $_.id = true ...} sort of thing?

I was able to write a report that produced this result but was hoping to use just powershell as other operations are required on the results anyways. her is the SQL I used in the GUI:

SELECT	
		s.SecretName AS 'Secret Name'
		,s.SecretId AS 'SecretId'
		,md.ValueBit as 'isCritical'
		,s.secretPolicyId as 'PolicyID'
        ,sp.SecretPolicyName as 'PolicyName'
        ,LastSuccessfulPasswordChangeDate as 'LastSuccessfulPasswordChangeDate'
        ,s.AutoChangeOnExpiration as 'autochange'
	FROM
		tbSecret s WITH (NOLOCK)
	
	INNER JOIN tbMetadataItemData md WITH (NOLOCK)
		ON s.SecretId = md.ItemId
	INNER JOIN tbSecretPolicy sp WITH (NOLOCK)
		ON s.secretPolicyId = sp.SecretPolicyId        
	where md.ValueBit = 1

Any ideas?

I guess they best way to ask is How can i see the data value in the metadata using powershell. the docs just are not getting me there and I need an example to start from.

thanks

[dionrowney]

solved

did this:

Find-TssSecret -TssSession $session | %{ Search-TssMetadata -TssSession $session -ItemId $_.SecretId -ItemType Secret }

[jagger]

That will do it, you are querying the full list of secrets first. If possible filter anything you can before doing the second search to limit resource usage

…

On Fri, Aug 30, 2024, 4:07 PM dionrowney ***@***.***> wrote: solved did this: Find-TssSecret -TssSession $session | %{ Search-TssMetadata -TssSession $session -ItemId $_.SecretId -ItemType Secret } — Reply to this email directly, view it on GitHub <#404 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA4OVV3CY5UPI2W7ZVCW3LZUDGG7AVCNFSM6AAAAABNKXREHGVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTANJQGM2TAMI> . You are receiving this because you are subscribed to this thread.Message ID: <thycotic-ps/thycotic. ***@***.***>