One workaround is to import the PSPKI command with prefix. Syntax:
Import-Module PSPKI -Prefix PSPKI
after that, all commands from PSPKI module will have prefix "PSPKI", e.g. Get-PSPKICATemplate. You can choose any prefix you prefer.
another workaround is to use explicit module prefix when calling a command:
AdcsAdministration\Get-CATemplate # will execute Get-CATemplate from AdcsAdministration module
PSPKI\Get-CATemplate # will execute Get-CATemplate from PSPKI module
The command "Get-CATemplate" is also available on the Microsoft side:
How can I use only the command from the ADCSadministration?
> How to provide credentials for the command, a'la Submit-CertificateRequest?
there is no way to provide custom credentials to management commands. Submit-CertificateRequest command supports custom credentials only when using CEP/CES enrollment web services. With DCOM custom credentials are not supported.
How to provide credentials for the command, a'la Submit-CertificateRequest?
$EFSTemplate = <OID of the template>
$certList = Get-IssuedRequest -CertificationAuthority <CA> -Filter "CertificateTemplate -eq $EFSTemplate" -Property *
$certList is an array of certificate information objects. This gets dump of all information about certificates.
What you're after is probably Request.RequestAttributes which provides info which PC ordered the cert and on whos behalf, then Request.RequesterName to find which user did that. The certificates are issued per user, not per computer.
Hope this helps.
© 2008 - 2019 - Sysadmins LV. All rights reserved