This blog contains the brief descriptions of the Windows PowerShell cmdlets that are for use in administering the Active Directory Certificate Services (AD CS) certification authority (CA) role service.

By default on Windows Server 2016 or Windows server 2019 this module will not be installed. we want to install it manually. Below are the steps to install them Manually.

We can Install them in 2 ways one is through the PowerShell and another one is through Server Manager Tool(GUI)

Installing Active Directory Certificate Services through Powershell(CLI)

Go to PowerShell With Administrator access. Give the below command

Install-WindowsFeature AD-Certificate


Installing Active Directory Certificate Services through Server Manager Tool GUI

Click on Start > Server Manager > Manage > Add Roles and Features


By default only Certificate Authority Will be selected.


Once You have completed with the Above Procedure we can use the below

Add-CAAuthorityInformationAccess Configures the AIA or OCSP for a certification authority.
Add-CACrlDistributionPoint Adds a CRL distribution point URI where AD CS publishes certification revocations.
Add-CATemplate Adds a certificate template to the CA.
Backup-CARoleService Backs up the CA database and private key information.
Confirm-CAEndorsementKeyInfo Checks whether the local CA trusts secure hardware for key attestation.
Get-CAAuthorityInformationAccess Gets the AIA and OCSP URI information set on the AIA extension of the CA properties.
Get-CACrlDistributionPoint Gets all the locations set on the CDP extension of the CA properties.
Get-CATemplate Gets the list of templates set on the CA for issuance of certificates.
Remove-CAAuthorityInformationAccess Removes AIA or OCSP URI from the AIA extension set on the certification authority.
Remove-CACrlDistributionPoint Removes the URI for the CRL distribution point (CDP) from the CA.
Remove-CATemplate Removes the templates from the CA which were set for issuance of certificates.
Restore-CARoleService Restores the CA database and private key information.

Click on this Link for an Single place where you get all the PowerShell cmdlet sorted based on the modules.

You can also refer other blogs on PowerShell at link

You can also refer other blogs on Microsoft at link

And also if you required any technology you want to learn, let us know below we will publish them in our site

Like our page in Facebook and follow us for New technical information. Paragraph

References are taken from official Microsoft websites

Leave a Reply

Your email address will not be published. Required fields are marked *