# Example .inf file:<\/p>
[Version]<\/p>
Signature=”$Windows NT$”<\/p>
<\/p>
[NewRequest]<\/p>
Subject = “CN=dcname.domain.com.au”<\/p>
KeySpec = 1<\/p>
KeyLength = 2048<\/p>
Exportable = TRUE<\/p>
MachineKeySet = TRUE<\/p>
SMIME = FALSE<\/p>
PrivateKeyArchive = FALSE<\/p>
UserProtected = FALSE<\/p>
UseExistingKeySet = FALSE<\/p>
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”<\/p>
ProviderType = 12<\/p>
RequestType = PKCS10<\/p>
KeyUsage = 0xa0<\/p>
<\/p>
[EnhancedKeyUsageExtension]<\/p>
OID = 1.3.6.1.5.5.7.3.1 ; Server Authentication<\/p>
<\/p>
# Create CSR<\/p>
certreq -new C:\\temp\\cert.inf c:\\temp\\csr.csr<\/p>
# Issue cert on CA<\/p>
certreq -submit -attrib “CertificateTemplate:2016KerberosAuthentication” “C:\\Users\\matt.soltau\\Desktop\\csr.csr”<\/p>
– Copy cert.cer from CA to DC<\/p>
# Accept cert on DC<\/p>
certreq -accept c:\\temp\\cert.cer<\/p>
# Copy Cert form Personal store to ADDS service<\/p>
# Find Thumbprint (PowerShell)<\/p>
> Cd Cert:\\LocalMachine\\My\\<\/p>
> Get-ChildItem<\/p>
Copy-Item “HKLM:\\SOFTWARE\\Microsoft\\SystemCertificates\\MY\\Certificates\\<Thumbprint>” “HKLM:\\SOFTWARE\\Microsoft\\Cryptography\\Services\\NTDS\\SystemCertificates\\MY\\Certificates\\”<\/p>","protected":false},"excerpt":{"rendered":"
# Example .inf file:[Version]Signature=”$Windows NT$” [NewRequest]Subject = “CN=dcname.domain.com.au”KeySpec = 1KeyLength = 2048Exportable = TRUEMachineKeySet = TRUESMIME = FALSEPrivateKeyArchive = FALSEUserProtected = FALSEUseExistingKeySet = FALSEProviderName = “Microsoft RSA SChannel […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4936","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/4936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=4936"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/4936\/revisions"}],"predecessor-version":[{"id":4937,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/4936\/revisions\/4937"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=4936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=4936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=4936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}