How to create Windows Root Certificate By using PowerShell

This will be required for the few occasions like when you want to create an Azure site to site VPN and when creating an ADFS.

First, you need to download the Window SDK and install on the server. You can find the download URL below.

Windows 10 SDK 

Once that's done, you can go into the location where this “makecert.exe” located in.

As you can see below now the location was changed and you can find that

C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x86>

I have highlighted the new folder location in yellow color.

Now you can run “Dir” a check whether the ““makecert.exe” file is available there.

To create the Root Certificate you can run,

makecert -sky exchange -r -n "CN=AzRootVPNCert" -pe -a sha1 -len 2048 -ss My "AzRootVPNCert.cer"

Once that is succeed, you should be able to find the created certificate under the personal certificate.

Next  will find the way that we can create the client certificate.