Create a new self signed certificate in the 'CurrentUser' certificate store to test the NPS PKI MFA second factor

nps_pki_mfa_self_signed.ps1

# PKI MFA Test Script
# Create a new self signed certificate in the 'CurrentUser' certificate store
# to test the NPS PKI MFA second factor
#
# ------------------------- Password Secure User Settings -------------------------
# Certificate hash methods: SHA1
#
# Checking mode for certificate chains: No checking
# Only for testing, use trusted PKI certificate for productive use
# 
# Force Validity of certificate: Deactivated
# Only for testing, otherwise checking for 'Trusted Root Certification Authorities'
# ------------------------- Password Secure User Settings -------------------------


$params = @{
    FriendlyName = 'Password Secure MFA Certificate'
    DnsName = $env:COMPUTERNAME
    Provider = 'Microsoft Strong Cryptographic Provider'
    CertStoreLocation = 'Cert:\CurrentUser\My'
    KeyUsage = 'KeyEncipherment'
    NotAfter = (Get-Date).AddYears(10)
    KeyAlgorithm = 'RSA'
    KeyLength = 4096

}

New-SelfSignedCertificate @params