Another blog on certificates! While working on my Certificate Enrollment Services lab, I wanted a straightforward way to request a machine certificate without having to repeat the same manual steps each time. A domain-joined server should be able to use Active Directory enrollment policy, a workgroup machine should be able to use CEP and CES, and both should handle an application certificate with a supplied subject and one or more Subject Alternative Names. If a certificate manager needs to approve the request, I also want the script to wait, retrieve the certificate and install it when it becomes available.

Continue reading