Creating a certificate template usually starts with opening certtmpl.msc, duplicating an existing template and working through the tabs. Give it a name, select the cryptographic settings, configure the subject and permissions, and publish it on the issuing CA. For a single template, that works perfectly fine. When you need to repeat the same configuration across different environments, I prefer having those choices written down in a script.
After working on scripts for requesting certificates and exporting certificates and private keys, I wanted to take the next step, creating and configuring the certificate templates themselves.
Continue reading