Condition based on result of Submit-Renewal or Install-PACertificate about posh-acme HOT 1 CLOSED

Hi @EdificomSA, thanks for reaching out. The Submit-Renewal function will return PACertificate objects (the same thing returned by New-PACertificate and Get-PACertificate) for any certs that were renewed successfully. So anything that is missing from the output either had a problem or wasn't scheduled to renew yet.

As you noticed, the Install-PACertificate function doesn't return anything and is effectively swallowing the output from Submit-Renewal in your current script. While I might be able to add something like a -PassThru switch to Install-PACertificate, there are other ways you could accomplish the same task. There's a section in the tutorial with some sample code for renewal logic that might work better.

Here's how I might modify your existing code:

Submit-Renewal -AllOrders | ForEach-Object {
    # every item in this loop is a cert that was renewed successfully
    $cert = $_
    $cert | Install-PACertificate
    if ('example.com' -in $cert.AllSANs) {
        # deploy for example.com
    } elseif ('example.net' -in $cert.AllSANs) {
        # deploy for example.net
    } else {
        # deploy for everything else
    }
}

You could also avoid needing to call Install-PACertificate explicitly by adding the Install flag to your existing orders. For each order in each account, you can run the following:

Set-PAOrder -Install

from posh-acme.