SummitPKI/PKIDeploy.psd1 at master · majst32/SummitPKI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
@{
    AllNodes = @(
        @{
            NodeName = '*'
            PSDscAllowPlainTextPassword = $true
            CADatabasePath = 'C:\windows\system32\CertLog'
            CALogPath = 'C:\CA_Logs'
            ADCSCryptoProviderName = 'RSA#Microsoft Software Key Storage Provider'
            ADCSHashAlgorithmName = 'SHA256'
            ADCSKeyLength = '2048'
            ADCSValidityPeriod = 'Years'
            ADCSValidityPeriodUnits = '2'
            DNSSuffix = 'company.pri'
            DomainShortName = "COMPANY"
           }

     @{
            NodeName = 'OLROOT.company.pri'
            Role = 'ADCSRoot'
            Password = 'P@ssw0rd'
        }

     @{
            NodeName = 'ENTSub'
            Role = 'ADCSSub'
            Password = 'P@ssw0rd'
            PsDscAllowDomainUser = $True
        }

     @{     NodeName = 'DC1'
            Role = 'DC'
            Password = 'P@ssw0rd'
            #PsDSCAllowDomainUser = $True
            EntSubIP = '192.168.3.30'
        }
    )
    ADCSRoot = @{
            # ADCS Certificate Services information  for offline root
            Features = @('ADCS-Cert-Authority';'RSAT-ADCS-Mgmt')
            CAType = 'StandaloneRootCA'
            CACN = 'CompanyRoot'
            CADNSuffix = 'C=US,L=Philadelphia,S=Pennsylvania,O=Company'
            CRLURL = "www.company.pri"
            RegistrySettings = @(
                #@{Name = "CRLPublicationURLs";Type = "MultiString";Value = '1:C:\Windows\system32\CertSrv\CertEnroll\%3%8.crl\n\02:http://www.company.pri/pki/%3%8.crl'},
                #@{Name = "CACertPublicationURLs"; Type = "MultiString"; Value = "2:http://www.company.pri/pki/%1_%3%4.crt"},
                @{Name = "CRLOverlapPeriodUnits"; Type = "Dword"; Value = 12},
                @{Name = "CRLOverlapPeriod"; Type = "String"; Value = "Hours"},
                @{Name = "ValidityPeriodUnits"; Type = "Dword";Value = 10},
                @{Name = "ValidityPeriod"; Type = "String"; Value = "Years"},
                @{Name = "DSConfigDN"; Type = "String"; Value = "CN=Configuration,DC=company,DC=pri"}
                )
            }

    ADCSSub = @{
            # ADCS Certificate Services info for Enterprise Subordinate
            Features = @('ADCS-Cert-Authority';'RSAT-ADCS-Mgmt';'Web-Server')
            CAType = 'EnterpriseSubordinateCA'
            CACN = 'IssuingCA-CompanyRoot'
            CADNSuffix = 'DC=Company,DC=pri'
            }

    DomainData = @{
            DomainDN = "DC=Company,DC=pri"
            }

 }