I have several resources on corpnet that run macros, spreadsheets and databases etc. Users are unable to remember to click to enable content and as resources are networked "allow trusted locations on my network" checkbox must be checked in the trust center for full functionality.
I would prefer to have power users digitally sign the resources they create and use a GPO to apply the cert. I have a Root CA server already established for cert based OWA. I have a GPO created and the Certificate Trust List Wizard ready to point to the cert. I am unsure how to create/request a cert for this purpose.