Solved

Code Signing Certificates with our Internal CA.

Posted on 2015-01-14
2
110 Views
Last Modified: 2015-01-15
Hi All

We have a PKI infrastructure setup here and have recently looked into signing our powershell scripts and locking down the Powershell Console.

What I would like to know is: Is it possible to enrol a code signing certificate to an AD Group, rather than a specific user?

We have quite a few people who write powershell scripts and enrolling each person and pushing out the public key through GPO trusted Publishers would be a night mare to administer.

If we could just enrol the group, hat would make it a lot easier. I hope i made my self clear enough

Many Thanks

SRFT
0
Comment
Question by:IM&T SRFT
2 Comments
 
LVL 40

Accepted Solution

by:
footech earned 500 total points
ID: 40550186
To the best of my knowledge, no this is not possible.  A code signing cert is issued to a user.  One option you do have though is to modify the template so that under the Subject Name tab, check "Supply in the request".  Then you can request a certificate and supply a generic name.  Then you could export this certificate and supply it to all the users that you want to be able to sign scripts (or other code) with it.  They could then install the certificate into their own user store.
0
 

Author Comment

by:IM&T SRFT
ID: 40550938
Great, thank you. I'll give that a try :)
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Set OWA language and time zone in Exchange for individuals, all users or per database.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question