CmdID / PowerShell / Cmdlets / Set
Set-CertificateAutoEnrollmentPolicy
Sets local certificate auto-enrollment policy. Windows Server PowerShell reference
From the Windows Server PowerShell reference 10 parameters Its page in the reference
Parameters
-Confirm, -cfPrompts you for confirmation before running the cmdlet.-EnableAllEnables all of the auto-enrollment policy settings and sets the value for the expiration percentage to 10 percent.-EnableBalloonNotificationsEnables the Expiration balloon notifications option for the certificate auto-enrollment policy.-EnableMyStoreManagementEnables the Renew expired certificates, update pending certificates, and remove revoked certificates option for the certificate auto-enrollment policy.-EnableTemplateCheckVerifies that existing certificates are based on the most recent version of a certificate template and updates them if they are not.-ExpirationPercentageSets the percentage of the certificate lifetime at which close-to-expiration events are logged and auto-enrollment notifications start to appear.-PolicyStateSpecifies the state of the certificate auto-enrollment policy configuration.-StoreNameSpecifies additional comma separated certificate stores to monitor for certificates that have expired or are expiring.-WhatIf, -wiShows what would happen if the cmdlet runs.-ContextSpecifies whether to set certificate auto-enrollment policy for the user or computer context.