Request a
...
computer certificate from the Austin CAs via PowerShell
Sign into a Windows system joined to the Austin Active Directory where the system has permissions to request a certificate from the desired template.
Start an administrative PowerShell session
...
Run the following commands to define the
...
list for the DNS host names for the certificate request:
...
Code Block language powershell
...
$DnsName =
...
In the same administrative PowerShell session, run the following to format the subject names on the certificate:
| Code Block |
|---|
$cert_sub = ("CN=" + $cert_url)
If ($cert_san) {$cert_dns = $cert_san + $cert_url} Else {$cert_dns = $cert_url} |
...
[System.Collections.Generic.List[System.String]]::new()Modify then run the following commands to define the required DNS host name and subject for the certificate request:
Code Block language powershell $DnsHostName = "hostname.domain"Run the following commands to define the subject for the certificate request:
Code Block language powershell $Subject = "CN=$DnsHostName"Run the following commands to add the required DNS host name to the list of DNS host names:
Code Block language powershell $DnsName.Add($DnsHostName)Modify then run the following commands to add any subject alternate names to the certificate request:
Code Block language powershell $DnsName.Add("san1.domain")Repeat the previous step until all subject alternate names have been added to the certificate request.
Run one of the following commands to define the certificate template:
For a Server (10-year duration) certificate
...
:
...
Code Block language powershell
...
$Template = "Server-10year"
For a VMware SSL certificate
...
:
Code Block
...
language powershell $Template = "VMwareSSL6.5"
...
Run the following commands to request the certificate:
Code Block language powershell
...
Get-Certificate -Url ldap: -CertStoreLocation "Cert:\LocalMachine\My" -Template
...
$Template -SubjectName
...
$Subject -DnsName
...
$DnsName
Request a user certificate from the Austin CAs via PowerShell
...
Sign into a Windows system joined to the Austin Active Directory as a user with permissions to request a certificate from the desired template
Start an administrative PowerShell session
...
Run one
...
of the following commands to define the certificate template:
...
For a Code Signing certificate
...
:
Code Block language powershell
...
$Template = "CodeSigning(Exportable)"
Run the following commands to request the certificate:
Code Block language powershell Get-Certificate -Url ldap: -CertStoreLocation "Cert:\CurrentUser\My" -Template
...
$Template