Solved

Code Signing Certificates with our Internal CA.

Posted on 2015-01-14
2
107 Views
Last Modified: 2015-01-15
Hi All

We have a PKI infrastructure setup here and have recently looked into signing our powershell scripts and locking down the Powershell Console.

What I would like to know is: Is it possible to enrol a code signing certificate to an AD Group, rather than a specific user?

We have quite a few people who write powershell scripts and enrolling each person and pushing out the public key through GPO trusted Publishers would be a night mare to administer.

If we could just enrol the group, hat would make it a lot easier. I hope i made my self clear enough

Many Thanks

SRFT
0
Comment
Question by:IM&T SRFT
2 Comments
 
LVL 39

Accepted Solution

by:
footech earned 500 total points
ID: 40550186
To the best of my knowledge, no this is not possible.  A code signing cert is issued to a user.  One option you do have though is to modify the template so that under the Subject Name tab, check "Supply in the request".  Then you can request a certificate and supply a generic name.  Then you could export this certificate and supply it to all the users that you want to be able to sign scripts (or other code) with it.  They could then install the certificate into their own user store.
0
 

Author Comment

by:IM&T SRFT
ID: 40550938
Great, thank you. I'll give that a try :)
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Set OWA language and time zone in Exchange for individuals, all users or per database.
Create and license users in Office 365 in bulk based on a CSV file. A step-by-step guide with PowerShell script examples.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

774 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question