配置Windows远程服务证书
1、生成自签名证书
$certname = "certnameTest" ## Replace {certificateName}
$cert = New-SelfSignedCertificate -Subject "CN=$certname" -CertStoreLocation "Cert:\CurrentUser\My" -KeyExportPolicy Exportable -KeySpec Signature -KeyLength 2048 -KeyAlgorithm RSA -HashAlgorithm SHA256 -NotAfter (Get-Date).AddMonths(600)
$mypwd = ConvertTo-SecureString -String "123456" -Force -AsPlainText ## Replace {myPassword}
Export-PfxCertificate -Cert $cert -FilePath "C:\$certname.pfx" -Password $mypwd ## Specify your preferred location
2、 导入certnameTest.pfx证书，存储类型：本地计算机。证书存储：自动选择证书存储
3、 certlm.msc 查看certnameTest证书，在个人->证书
4、 wmic 配置证书
SSLCertificateSHA1Hash 为指纹值
wmic /namespace:\\root\cimv2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="b37fa0aa79c41284b7d64fa1813d02fce7b2c850"