Certificate Management - Microsoft CA - Routing Policy - CredSSP alternatives?

[Marcio Olivieri]

Hello everyone. 

When using the Certificate Management module for Microsoft CA Servers to automate the request flow for new/renew certificates, there is an OOB flow action called Request/Renew Microsoft Certificate (requestrenew_microsoft_certificate) that is triggered by the routing policy, once a request is created. This action has a PowerShell step that specifies "CredSSP" authentication:

Invoke-Command -ComputerName $computer -credential $cred -Authentication CredSSP -ScriptBlock

In our environment, CredSSP is disabled due to security concerns, so the action above fails.

Did anyone face similar issue or managed to fix it? Thank you.

[KarishmaN]

Did you receive an answer to this?

[Marcio Olivieri · Accepted solution]

Nope, but I managed to make it functional by editing the OOB script and changing like below:
Invoke-Command -ComputerName $computer -credential $cred -Authentication Negotiate -ScriptBlock