Finally! Create, Permission, and Publish an AD CS Certificate Template with ...
summary
A PowerShell module named ADCS template module automates creating, exporting and importing AD CS certificate templates by dumping template AD attributes to export to JSON and reconstructing them (OID creation initially uses a random-hex hack later revealed as an MD5-style hash). The demo uses DSC to build a full domain controller, install ADCS, create templates like PSCMS and Tanium, publish them to the CA and set ACLs for enroll/autoenroll with one-liners. Code works reliably for rapid labs but is explicitly lab-focused not production-ready and lives on the Gallery/GitHub.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:10Overview
- 1:30Demo
- 6:55Server Manager
- 12:40Creating the Template
- 15:57Generating the Template
- 27:47Demoing the Template
- 29:21Config Data
- 30:24Demo File
- 30:59Publish Template
- 31:52Protect EMS Message
- 33:07GUI Demo
- 33:49Certificate Services Demo
- 36:09JSON Export
- 37:49Autoenrol
related talks
50mBeyond the Mcse: Active Directory for the Security Professional
23mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
03h 28mEntra ID & M365 as Code with DSC
30mPKI Well Revised: Common Mistakes Which Lead to Huge Compromise of Identity
38mTrapped By The CLI
42mWriting Your Own Ticket to the Cloud Like APT: A Dive to AD FS Attacks, Detections, and Mitigations
45mKerberos Delegation, CredSSP, and Windows PowerShell
56mSecure and increase mobile workforce productivity with AWS for MDM