Get-ADCertificateAuthority.ps1

Get-ADCertificateAuthority.ps1

$ConfigurationDN = $([ADSI]"LDAP://RootDSE").ConfigurationNamingContext;
$SearchRoot = "LDAP://CN=Enrollment Services,CN=Public Key Services,CN=Services,$ConfigurationDN"
$SearchFilter = "(objectCategory=pkiEnrollmentService)"
$EnrollmentServices = @()
(New-Object adsiSearcher([ADSI]$SearchRoot,$SearchFilter)).FindAll() | ForEach-Object {
    $EnrollmentServices += [PSCustomObject] [hashtable] $_.Properties
}

Hi @awakecoding ,
When I execute the code on my newly installed Windows 11 computer, nothing is returned. However, with this code, it works:

$ConfigurationDN = $([ADSI]"LDAP://RootDSE").ConfigurationNamingContext;
$SearchRoot = "LDAP://CN=Enrollment Services,CN=Public Key Services,CN=Services,$ConfigurationDN"
$SearchFilter = "(objectCategory=pkiEnrollmentService)"

foreach ($CAEnrollService in (New-Object adsiSearcher([ADSI]$SearchRoot, $SearchFilter)).FindAll()) {
    $serviceProperties = [ordered]@{}
    foreach ($propName in 'Name CN DnsHostName'.Split()) {
        $serviceProperties[$propName] = $CAEnrollService.Properties[$propName] | Select-Object -First 1
    }

    [pscustomobject]$serviceProperties
}

@albert-widjaja do you have more than one CAs? I wonder if that's the main difference