Request a
...
computer certificate from the Austin CAs via PowerShell
...
Sign into a Windows system joined to the Austin Active Directory
...
where the system has permissions to request a certificate from the desired template.
...
Start an administrative PowerShell
...
For a Code Signing certificate, run the following:
...
session
Run the following commands to define the list for the DNS host names for the certificate request:
Code Block language powershell $DnsName = [System.Collections.Generic.List[System.String]]::new()Modify then run the following commands to define the required DNS host name and subject for the certificate request:
Code Block language powershell $DnsHostName = "hostname.domain"Run the following commands to define the subject for the certificate request:
Code Block language powershell $Subject = "CN=$DnsHostName"Run the following commands to add the required DNS host name to the list of DNS host names:
Code Block language powershell $DnsName.Add($DnsHostName)Modify then run the following commands to add any subject alternate names to the certificate request:
Code Block language powershell $DnsName.Add("san1.domain")Repeat the previous step until all subject alternate names have been added to the certificate request.
Run one of the following commands to define the certificate template:
For a Server (10-year duration) certificate:
Code Block language powershell $Template = "Server-10year"For a VMware SSL certificate:
Code Block language powershell $Template = "VMwareSSL6.5"
Run the following commands to request the certificate:
Code Block language powershell Get-Certificate -Url ldap: -CertStoreLocation "Cert:\
...
LocalMachine\My" -Template
...
$Template -SubjectName $Subject -DnsName $DnsName
Request a
...
user certificate from the Austin CAs via PowerShell
...
Sign into a Windows system joined to the Austin Active Directory
...
as a user with permissions to request a certificate from the desired template
...
Start an administrative PowerShell
...
| Code Block |
|---|
$cert_subject = <FQDN for the certificate>
$cert_san = @("<FQDN for certificate SAN #1>","<FQDN for certificate SAN #2>",...) |
...
session
Run one of the following commands to define the certificate template:
For a
...
Code Signing certificate:
Code Block
...
language powershell $Template =
...
"CodeSigning(Exportable)"
Run the following commands to request the certificate:
Code Block language powershell Get-Certificate -Url ldap: -CertStoreLocation "Cert:\
...
CurrentUser\My" -Template
...
$Template