ADCS Functions

Get-DomainCATemplate

Description

Query for available CA templates. Supports filtering for vulnerable template.

Aliases

PV > Get-CATemplate

Syntax

PV > Get-DomainCATemplate
-Count         -Enabled       -NoWrap        -Properties    -SearchBase    -Vulnerable    
-Domain        -Identity      -OutFile       -ResolveSIDs   -Select        -Where

Examples

PV > Get-DomainCATemplate -Domain domain.local 
PV > Get-DomainCATemplate -Vulnerable -ResolveSIDs
PV > Get-DomainCATemplate -Vulnerable -ResolveSIDs -Properties cn,Vulnerable
PV > Get-DomainCATemplate -Vulnerable -ResolveSIDs -OutFile vulnerable-CA.txt

Parameters

# With Argument
-Select =
-Where =
-OutFile =
-Identity = 
-Domain = 
-SearchBase = 
-Properties = 

# No Argument
-Count = 
-Enabled =
-NoWrap =
-Vulnerable = 
-ResolveSIDs =   

Get-DomainCA

Description

Query for Certificate Authority(CA)

Aliases

PV > Get-CA

Syntax

PV > Get-DomainCA 
-CheckWebEnrollment   -Domain               -OutFile              -Select               -Where                
-Count                -NoWrap               -Properties           -TableView

Examples

PV > Get-DomainCA -Domain domain.local 
PV > Get-DomainCA -CheckWebEnrollment

Parameters

# With Argument
-Domain =
-OutFile =
-Select =
-Where =
-Properties =

# No Argument
-CheckWebEnrollment =
-NoWrap =                                   
-Count =                                       
-TableView =

Remove-DomainCATemplate

Description

Remove specified Domain CA Template

Aliases

PV > Remove-CATemplate

Syntax

PV > Remove-DomainCATemplate
-Count        -Domain       -Identity     -NoWrap       -OutFile      -Properties   -SearchBase   -Select       -Where

Examples

PV > Remove-DomainCATemplate -Identity Temp-CATemplate

Parameters

# With Argument
-Domain =
-Identity =
-OutFile =
-Properties =
-SearchBase =
-Select =  
-Where =

# No Argument
-Count =                    
-NoWrap =                

Set-DomainCATemplate

Description

Modify domain object's attributes of a CA Template

Aliases

PV > Set-CATemplate

Syntax

PV > Set-DomainCATemplate 
-Append     -Clear      -Domain     -Identity   -OutFile    -Set

Examples

PV > Set-DomainCATemplate -Identity Temp-CATemplate -Clear pKIExtendedKeyUsage
PV > Set-DomainCATemplate -Identity Temp-CATemplate -Set 'pKIExtendedKeyUsage=Client Authentication'
PV > Set-DomainCATemplate -Identity Temp-CATemplate -Set 'pKIExtendedKeyUsage=Client Authentication,Server Authentication'
PV > Set-DomainCATemplate -Identity Temp-CATemplate -Append 'pKIExtendedKeyUsage=Server Authentication'

Parameters

# With Argument
-Append
-Clear
-Domain     
-Identity   
-OutFile    
-Set

# No Argument

Add-DomainCATemplate

Description

Add new Domain CA Template

Aliases

PV > Add-CATemplate

Syntax

-DisplayName   -Domain        -Duplicate     -Name          -NoWrap

Examples

PV > Add-DomainCATemplate 
-DisplayName   -Domain        -Duplicate     -Name          -NoWrap

Parameters

# With Argument
-DisplayName
-Domain        
-Duplicate     
-Name

# No Argument      
-NoWrap

Add-DomainCATemplateAcl

Description Add ACL to a certificate template. Supported rights so far are All, Enroll, Write

Aliases

PV > Add-CATemplateAcl

Syntax

PV > Add-DomainCATemplateAcl 
-Domain              -OutFile             -PrincipalIdentity   -Rights              -Template

Examples

Parameters

# With Argument
-Domain              
-OutFile             
-PrincipalIdentity   
-Rights              
-Template

# No Argument