Getting Started with PSPKI - Server 2022 Offline Root CA Install 

Run from an elevated Command Prompt
Commands used:
md D:\CertDB
md D:\CertLog
set-content C:\Windows\CAPolicy.inf '[Version]'
add-content C:\Windows\CAPolicy.inf 'Signature="$Windows NT$"'
add-content C:\Windows\CAPolicy.inf '[Certsrv_Server]'
add-content C:\Windows\CAPolicy.inf 'RenewalKeyLength=4096'
add-content C:\Windows\CAPolicy.inf 'RenewalValidityPeriod=Years'
add-content C:\Windows\CAPolicy.inf 'RenewalValidityPeriodUnits=20'
add-content C:\Windows\CAPolicy.inf 'CRLPeriod=days'
add-content C:\Windows\CAPolicy.inf 'CRLPeriodUnits=2'
add-content C:\Windows\CAPolicy.inf 'CRLDeltaPeriod=Hours'
add-content C:\Windows\CAPolicy.inf 'CRLDeltaPeriodUnits=4'
add-content C:\Windows\CAPolicy.inf 'LoadDefaultTemplates=0'
add-content C:\Windows\CAPolicy.inf 'AlternateSignatureAlgorithm=1'
Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTools
Install-AdcsCertificationAuthority -CAType StandaloneRootCA -CACommonName "ADCSLab22-ORCA" -KeyLength 4096 -HashAlgorithm SHA384 -CryptoProviderName "RSA#Microsoft Software Key Storage Provider" -ValidityPeriod Years -ValidityPeriodUnits 20 -DatabaseDirectory "D:\CertDB" -LogDirectory "D:\CertLog" -Force
👉SUBSCRIBE
Be sure to Subscribe and click that Bell Icon for notifications!
#mindingthekeystore​​ #pki​​ #adcs #microsoft
///FREE ADCS ASSESSMENT\\\\
Learn about how our reporting tools can be used to give detailed reporting metrics for your Active Directory Certificate Services/PKI here:
www.pkisolutio...
and then click on Learn More or Start an Assessment
///FREE TRAINING\\\
Try our online PKI in-Depth Training Course for free here:
www.pkisolutio...
///FOLLOW US ON SOCIAL\\\
LINKEDIN: / pki-solutions
TWITTER: / pkisolutions
///DISCLAIMER\\\
Some of the links posted here may be affiliate links. This means if you use these links and purchase, we may earn a small commission. Any funds from affiliate links help support the cost of the channel. We will only share links to products we use and approve of, or other PKI professionals who we trust have tried those products and endorse.