# jakehildreth/Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Repository: https://github.com/jakehildreth/Locksmith
Canonical: https://ross.abutalabs.com/products/jakehildreth-locksmith
Homepage: https://jakehildreth.github.io/Locksmith/
Language: PowerShell
License: NOASSERTION
License Family: other
Topics: active-directory, ad-cs, adcs, pki, powershell, powershell-module, powershell-script, active-directory-certificate-services
Last push: 2026-08-01T09:08:34+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 95, release rhythm 35, longevity 100
- inputs: {"age_days": 1589, "days_push": 32, "days_rel": 356, "gap_med": 49, "n_releases_24m": 8}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1606, forks 151 (observed 2026-08-28T04:05:10.474661+00:00)

## What it is
Locksmith is a PowerShell module and script that audits Active Directory Certificate Services (AD CS) for common misconfigurations. It can identify issues, report them to the console or CSV, and optionally apply fixes automatically.

## Use cases
- audit AD CS for security misconfigurations
- find and fix Active Directory Certificate Services vulnerabilities
- generate a CSV report of ADCS issues and remediation steps
- automatically remediate common ADCS misconfigurations
- run targeted ADCS security scans on a domain-joined machine

## When to choose
- you administer Active Directory and need to harden AD CS
- you want a quick, scriptable audit of certificate service misconfigurations
- you prefer a PowerShell-native tool installable from the PowerShell Gallery

## When to avoid
- you are not on a domain-joined Windows system
- you need general PKI management beyond AD CS misconfiguration auditing
- you cannot run PowerShell or lack the ActiveDirectory module

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, developer-tools
- domain: security, windows, developer-tools
- platform: windows, cli
- tags: active-directory, ad-cs, pki, powershell-module, certificate-services, misconfiguration-audit

## Member repositories
- jakehildreth/Locksmith (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:10.474661+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:52:14.179317+00:00, confidence not recorded.
  - readme: https://github.com/jakehildreth/Locksmith (fetched 2026-08-28T04:05:10.474661+00:00, sha 19c940c0e0dc)
  - homepage: https://jakehildreth.github.io/Locksmith/ (fetched 2026-08-29T11:23:46.364295+00:00, sha 0047092ebdef)
- Data as of 2026-08-30T08:39:29.467469+00:00.