Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Code Signing Certificates with our Internal CA.

Posted on 2015-01-14
2
109 Views
Last Modified: 2015-01-15
Hi All

We have a PKI infrastructure setup here and have recently looked into signing our powershell scripts and locking down the Powershell Console.

What I would like to know is: Is it possible to enrol a code signing certificate to an AD Group, rather than a specific user?

We have quite a few people who write powershell scripts and enrolling each person and pushing out the public key through GPO trusted Publishers would be a night mare to administer.

If we could just enrol the group, hat would make it a lot easier. I hope i made my self clear enough

Many Thanks

SRFT
0
Comment
Question by:IM&T SRFT
2 Comments
 
LVL 40

Accepted Solution

by:
footech earned 500 total points
ID: 40550186
To the best of my knowledge, no this is not possible.  A code signing cert is issued to a user.  One option you do have though is to modify the template so that under the Subject Name tab, check "Supply in the request".  Then you can request a certificate and supply a generic name.  Then you could export this certificate and supply it to all the users that you want to be able to sign scripts (or other code) with it.  They could then install the certificate into their own user store.
0
 

Author Comment

by:IM&T SRFT
ID: 40550938
Great, thank you. I'll give that a try :)
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script checks a path to see if a folder exists. If the folder does exist you will get output "The folder has previously been created. No action taken" If not it will create the folder. Then adds one user modify permission to the folder. It …
Active Directory replication delay is the cause to many problems.  Here is a super easy script to force Active Directory replication to all sites with by using an elevated PowerShell command prompt, and a tool to verify your changes.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question