How it works...

In step 1, you use Install-WindowsFeature to add the Certificate Services feature. As you can see, a reboot is not required:

With step 2, you create here a string which you write to capolicy.inf in the folder (C:\Windows). Windows uses this policy file to define some aspects of the CA policy that relate to the certificate revocation list, an essential aspect of an enterprise PKI implementations.

You use the Install-AdcsCertificationAuthority cmdlet, specifying several other configuration items. These items include the common name for the CA, Reskit Root CA, the type of CA (a StandaloneRootCA), the key length of the CA root ...

Get Windows Server 2016 Automation with PowerShell Cookbook - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.