Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Code Signing Certificates with our Internal CA.

Posted on 2015-01-14
2
Medium Priority
?
117 Views
Last Modified: 2015-01-15
Hi All

We have a PKI infrastructure setup here and have recently looked into signing our powershell scripts and locking down the Powershell Console.

What I would like to know is: Is it possible to enrol a code signing certificate to an AD Group, rather than a specific user?

We have quite a few people who write powershell scripts and enrolling each person and pushing out the public key through GPO trusted Publishers would be a night mare to administer.

If we could just enrol the group, hat would make it a lot easier. I hope i made my self clear enough

Many Thanks

SRFT
0
Comment
Question by:IM&T SRFT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 41

Accepted Solution

by:
footech earned 2000 total points
ID: 40550186
To the best of my knowledge, no this is not possible.  A code signing cert is issued to a user.  One option you do have though is to modify the template so that under the Subject Name tab, check "Supply in the request".  Then you can request a certificate and supply a generic name.  Then you could export this certificate and supply it to all the users that you want to be able to sign scripts (or other code) with it.  They could then install the certificate into their own user store.
0
 

Author Comment

by:IM&T SRFT
ID: 40550938
Great, thank you. I'll give that a try :)
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows 10 came with  a lot of built in applications, Some organisations leave them there, some will control them using GPO's. This Article is useful for those who do not want to have any applications in their image (example:me).
My attempt to use PowerShell and other great resources found online to simplify the deployment of Office 365 ProPlus client components to any workstation that needs it, regardless of existing Office components that may be needing attention.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question