Lab Tasks
1. List Certificate Templates
View all available certificate templates on the CA.
Get-CATemplate
2. Request a Certificate
Request a new certificate using a template.
Get-Certificate -Template WebServer -SubjectName "CN=web.hexworth.local"
3. Browse Certificate Store
List certificates in the local certificate store.
Get-ChildItem cert:\
4. Publish CRL
Publish a new Certificate Revocation List.
Publish-CRL
5. Backup CA
Backup the Certificate Authority database and keys.
Backup-CARoleService -Path "C:\CABackup"
PKI Hierarchy:
The CA issues certificates based on templates. The cert:\ drive provides access to local certificate stores.
The CA issues certificates based on templates. The cert:\ drive provides access to local certificate stores.
Tip: Use
Get-Command *Certificate* and certutil commands to discover PKI management tools.