A PowerShell script for updating the thumbprint of the xConnect certification in Sitecore 9.x

update-thumbprints.ps1

#Requires -RunAsAdministrator
param (
    [Parameter(Mandatory=$true)]
    [string]
    $SitePrefix,
    [Parameter(Mandatory=$true)]
    [string]
    $PfxFileOrThumbprint
)

Import-Module WebAdministration
$OutputEncoding='utf-8'

if (Test-Path $PfxFileOrThumbprint) {
    $Thumbprint = Get-PfxCertificate $PfxFileOrThumbprint | Select-Object -ExpandProperty Thumbprint
}
elseif ($PfxFileOrThumbprint -match "[0-9A-F]{40}") {
    $Thumbprint = $PfxFileOrThumbprint
}
else {
    Write-Error "Invalid parameter [PfxFileOrThumbprint]: $($PfxFileOrThumbprint)"
    Exit
}

$sitePaths = Get-ChildItem IIS:\Sites | ? Name -like "$($SitePrefix)*" | % { $_.PhysicalPath -replace "physicalPath=" }

## Update ConnectionStrings.config
$sitePaths | Get-ChildItem -Filter "ConnectionStrings.config" -Recurse | % {
    $xmlDoc = [xml](Get-Content $_.FullName)
    if (-not $xmlDoc.connectionStrings) {
        return
    }

    Write-Output "Update: $($_.FullName)"
    $xmlDoc.connectionStrings.add | Where-Object { $_.connectionString.Contains("FindByThumbprint") } | % {
        $_.connectionString = $_.connectionString -replace "[0-9A-F]{40}",$Thumbprint
    }

    $xmlDoc.Save($_.FullName)
}

## Update AppStrings.config
$sitePaths | Get-ChildItem -Filter "AppSettings.config" -Recurse | % {
    $xmlDoc = [xml](Get-Content $_.FullName)
    if (-not $xmlDoc.connectionStrings) {
        return
    }

    $xmlDoc.appSettings.add | Where-Object { $_.key -eq "validateCertificateThumbprint" } | % {
        $_.value = $Thumbprint
    }

    $xmlDoc.Save($_.FullName)
}

## Restart xConnect services
Get-Service -Name "*$($SitePrefix)*" | Restart-Service