For a Code Signing certificate, run the following:
Get-Certificate -Url ldap: -CertStoreLocation "Cert:\CurrentUser\My" -Template "CodeSigning(Exportable)" |
Log into a system joined to the Austin Active Directory where the system has permissions to request a certificate from the desired template
Open an administrative PowerShell prompt then modify and run the following:
$cert_subject = <FQDN for the certificate>
$cert_san = @("<FQDN for certificate SAN #1>","<FQDN for certificate SAN #2>",...) |
In the same administrative PowerShell session, run one of the following:
For a Server (10 year duration) certificate, run the following:
$cert_dns = @($cert_subject) + $cert_san Get-Certificate -Url ldap: -CertStoreLocation "Cert:\LocalMachine\My" -Template "Server-10year" -DnsName $cert_dns |