Add-CertificateEnrollmentPolicyServer

Add-CertificateEnrollmentPolicyServer
    [-NoClobber]
    -Url <Uri>
    [-RequireStrongValidation]
    [-Credential <PkiCredential>]
    -context <Context>
    [-AutoEnrollmentEnabled]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

The Add-CertificateEnrollmentPolicyServer cmdlet adds an enrollment policy server to the current user or local system configuration. If an enrollment policy server already exists, then this cmdlet will overwrite it. Group Policy can be configured to prevent enrollment policy servers from being added.

Delegation may be required when using this cmdlet with Windows PowerShell remoting and changing user configuration.

Add-CertificateEnrollmentPolicyServer -Url $url -Context Machine

This example loads a policy from $url using Windows integrated authentication under the computer context, using the computer account credentials. This example also adds the policy server to the local computer configuration. Auto enrollment is off and strong validation is off.

$cert = Get-ChildItem -Path cert:\LocalMachine\My\EEDEF61D4FF6EDBAAD538BB08CCAADDC3EE28FF

$parameters = @{
    Url = $cert.EnrollmentPolicyEndPoint.Url
    Credential = $cert
    Context = 'Machine'
}
Add-CertificateEnrollmentPolicyServer @parameters

This example loads a policy using $cert as the authentication credential and adds the policy to the local computer local configuration since the context is the local computer (Machine).

$up = Get-Credential

Add-CertificateEnrollmentPolicyServer -Url $url -Context Machine -Credential $up

This example loads a policy using the username and password from $url. This example adds the policy server to the local computer configuration.

$cert = Get-ChildItem -Path cert:\CurrentUser\My\EEDEF61D4FF6EDBAAD538BB08CCAADDC3EE28FF

$parameters = @{
    Url = $cert.EnrollmentPolicyEnd
    Credential = $cert.PSPath
    Context = 'Machine'
}
Add-CertificateEnrollmentPolicyServer @parameters

This example loads policy using the Path object for a certificate. Use the certificate to authenticate to the URL and add the policy server into the local user configuration.

$up = Get-Credential

Add-CertificateEnrollmentPolicyServer -Url $url -Context User -Credential $up -WhatIf

What if: Policy successfully loaded from {$url} using username/password credentials.
Policy server configuration will be added to current user context.

This example shows that if the policy cannot be loaded or if there is a conflict with an identifier (ID) or URL, then this will be the output.

If the policy server already exists, then the output will state that the existing policy server configuration will be overwritten.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

The EnrollmentPolicyServer object contains information about the certificate enrollment policy.

The EnrollmentPolicyServer object contains information about the certificate enrollment policy.