Installing IBCM Client Computer Certificate remotely using PowerShell

Question

Installing IBCM Client Computer Certificate remotely using PowerShell

Kedar Tamboli 171

Hello All,

We are evaluating installation IBCM Client certificate on system remotely using powershell.

If we run the below command locally on the system. Its working fine.

Get-Certificate -Template "IBCM Client Certificate SHA2" -DnsName "computername.fqdn" -CertStoreLocation cert:\LocalMachine\My

However, if we run the below command remotely (from another system), we are getting below error.

$CompName = '<remote_computer_name>'

Invoke-Command -ComputerName $CompName -ScriptBlock {Get-Certificate -Template "IBCM Client Certificate SHA2" -DnsName "computername.fqdn" -CertStoreLocation "cert:\LocalMachine\My"}

CertEnroll::CX509Enrollment::InitializeFromTemplateName: The requested certificate template is not supported by this CA. 0x80094800 (-2146875392
CERTSRV_E_UNSUPPORTED_CERT_TYPE)

CategoryInfo : NotSpecified: (:) [Get-Certificate], Exception
FullyQualifiedErrorId : System.Exception,Microsoft.CertificateServices.Commands.GetCertificateCommand
PSComputerName : <remote_computer_name>

Any idea where I am missing?

Or suggest any alternative to achieve the certificate enrollment.

Thanks and reagrds,
Kedar

0 comments

1 answer

Your answer

Answer 1

Vadims Podāns 9,266 MVP

Requested template format is incorrect. -Template parameter accepts template common name, not display name. Often (not always), common name is same as display name without spaces.

Kedar Tamboli 171 Reputation points

2021-02-01T13:07:45.633+00:00

Hello Crypt32,

Below command is running successfully locally on system:

Get-Certificate -Template "IBCM Client Certificate SHA2" -DnsName "computername.fqdn" -CertStoreLocation cert:\LocalMachine\My

However, giving error when running remotely.

Common name is not available in template properties.
Kedar Tamboli 171 Reputation points

2021-02-19T12:19:01.213+00:00

Hello,

I have explored the same command using PSEXEC and its working successfully. Command as below:

PsExec.exe \ABCD -spowershell "Get-Certificate -Template 'IBCM Client Certificate SHA2' -DnsName "computername.fqdn" -CertStoreLocation cert:\LocalMachine\My"

However below command using PowerShell is not working. Please suggest if any modifications require or am I missing anything:

Invoke-Command -ComputerName ABCD -ScriptBlock { Get-Certificate -Template 'IBCM Client Certificate SHA2' -DnsName "computername.fqdn" -CertStoreLocation cert:\LocalMachine\My }

Thanks and regards,
kedar

Share via

Installing IBCM Client Computer Certificate remotely using PowerShell

1 answer

Your answer