DC

Install-WindowsFeature adcs-cert-authority -IncludeManagementTools
Install-AdcsCertificationAuthority -CAType EnterpriseRootCA -CACommonName CORP-CA -OverwriteExistingKey
certtmpl.msc

Duplicate Template

Duplicate Template

image.png

image.png

image.png

image.png

certsrv.msc

image.png

image.png

Get-Certificate -Template ADFS -SubjectName CN=*.corp.com -DnsName www.corp.com,adfs.corp.com -CertStoreLocation Cert:\\LocalMachine\\My

ls Cert:\\LocalMachine\\My
Export-PfxCertificate -Cert Cert:\\LocalMachine\\My\\[CN=*.corp.com의 Thumbprint] -Password(ConvertTo-SecureString "Skill39**" -AsPlainText -Force) -FilePath wildcard.pfx

ls Cert:\\LocalMachine\\Root\\
Export-Certificate -Cert Cert:\\LocalMachine\\Root\\[CN=CORP-CA, DC=corp, DC=local의 Thumbprint] -FilePath ca.crt