The PowerShell Podcast
The PowerShell Podcast
PDQ.com
PowerShell Tools for PKI and Secure Boot with Richard Hicks
59 minutes Posted Mar 2, 2026 at 3:00 pm.
0:00
59:12
Download MP3
Show notes
Long-time Microsoft MVP and consultant Richard Hicks joins The PowerShell Podcast to talk about ADCS security, PKI misconfigurations, and why PowerShell is a consultant’s ultimate force multiplier. Richard shares real-world stories from auditing enterprise certificate environments, explains how simple template mistakes can lead to full domain compromise, and walks through tools like Locksmith that help administrators quickly identify dangerous configurations.
The conversation also explores Richard’s open-source PowerShell work, including his widely downloaded Get-UEFICertificate script for Secure Boot certificate expiration issues and his new ADPrincipalCertificate module for cleaning up unnecessary certificates published in Active Directory. Along the way, Richard reflects on career growth, publishing, consulting, and why sharing knowledge openly has been one of the biggest drivers of his long-term success.Key Takeaways:• ADCS is easy to deploy but difficult to secure — Misconfigured certificate templates, especially ESC1 scenarios, can allow instant privilege escalation and domain compromise.• PowerShell turns repetitive work into reusable tools — From UEFI certificate auditing to Active Directory cleanup, scripting creates consistency and prevents human error.• Sharing expertise compounds over time — Blogging, publishing modules, and speaking at conferences builds credibility, community, and long-term career momentum.Guest Bio:Richard Hicks is the founder and principal consultant of Richard M. Hicks Consulting, Inc. A Microsoft MVP with over 30 years of experience, he specializes in secure remote access and PKI, helping organizations deliver secure, high-performing access for today’s mobile workforce.Resource Links:
Richard Hicks Website – https://richardhicks.com
Connect with Richard – https://richardhicks.com/connect
Connect with Andrew: https://andrewpla.tech/links
Get-UEFICertificate Script – https://www.powershellgallery.com/packages/Get-UEFICertificate
ADPrincipalCertificate Module – https://www.powershellgallery.com/packages/ADPrincipalCertificate
Locksmith ADCS Audit Tool – https://github.com/jakehildreth/Locksmith
PDQ Discord – https://discord.gg/PDQ
PowerShell Wednesdays – https://www.youtube.com/watch?v=Oa0GYX9_vj8&list=PL1mL90yFExsix-L0havb8SbZXoYRPol0B&pp=sAgC
The PowerShell Podcast on YouTube: https://youtu.be/4HYCAjQS2W8