Certification Question

[robert030975]

Hi

I have an application which uses xp_cmdshell via certification however is there any way that you can look at it?
i.e. what accounts / SPs run under the certification and also if it has an expiry date?

Thanking in advance

 

[robert030975]

Okay found 1 answer

SELECT Module = object_name(cp.major_id),
[Cert/Key] = coalesce(c.name, a.name),
cp.crypt_type_desc,
expiry_date
FROM sys.crypt_properties cp
LEFT JOIN sys.certificates c ON c.thumbprint = cp.thumbprint
LEFT JOIN sys.asymmetric_keys a ON a.thumbprint = cp.thumbprint

This will basically inform you of what Certs agsint sps within your db.

Two questions then how do I alter the cert and amend the expiry_date and secondly how do I see which account/s has access to it.


Many Thanks

Robert