DC

Install-WindowsFeature adcs-cert-authority -IncludeManagementTools
Install-AdcsCertificationAuthority -CAType EnterpriseRootCA -CACommonName CORP-CA -OverwriteExistingKey
certtmpl.msc

Duplicate Template

Duplicate Template

image.png

image.png

image.png

image.png

certsrv.msc

image.png

image.png

Get-Certificate -Template ADFS -SubjectName CN=*.corp.com -DnsName www.corp.com,adfs.corp.com -CertStoreLocation Cert:\LocalMachine\My

ls Cert:\LocalMachine\My
Export-PfxCertificate -Cert Cert:\LocalMachine\My\[CN=*.corp.com의 Thumbprint] -Password(ConvertTo-SecureString "Skill39**" -AsPlainText -Force) -FilePath wildcard.pfx

ls Cert:\LocalMachine\Root\
Export-Certificate -Cert Cert:\LocalMachine\Root\[CN=CORP-CA, DC=corp, DC=local의 Thumbprint] -FilePath ca.crt