feat: instead of "deploy", can now "install" and "uninstall"

Author: jakehildreth

ADCSGoat/Public/Deploy-AdcsGoat.ps1 ADCSGoat/Public/Install-ADCSGoat.ps1ADCSGoat/Public/Deploy-AdcsGoat.ps1 renamed to ADCSGoat/Public/Install-ADCSGoat.ps1

@@ -1,4 +1,4 @@
-function Deploy-AdcsGoat {
+function Install-ADCSGoat {
     [CmdletBinding()]
     param (
         [switch]$Randomize
@@ -49,29 +49,28 @@ function Deploy-AdcsGoat {
     # What: Get the list of all Enrollment Services, generate their full CA names, then add the name to the CA object
     # Why:
     $EnrollmentServices = Find-AGEnrollmentService
-    $EnrollmentServicesWithFullName = $EnrollmentServices | Set-AGEnrollmentServiceFullName
+    $EnrollmentServices | Set-AGEnrollmentServiceFullName
 
     # What: Enable ESC5 configuration on all CAs.
     # Why:
-    $EnrollmentServicesWithFullName | ForEach-Object {
+    $EnrollmentServices | ForEach-Object {
         Write-Verbose "Granting Authenticated Users Full Control of: $($_.FullName)"
         # Enable-PCEditFlag -CAFullName $_.FullName -Flag EDITF_ATTRIBUTESUBJECTALTNAME2
     }
 
     # What: Enable ESC6 configuration on all CAs.
     # Why:
-    $EnrollmentServicesWithFullName | ForEach-Object {
+    $EnrollmentServices | ForEach-Object {
         Write-Verbose "Assigning ESC6 configuration to: $($_.Name)"
         Enable-PCEditFlag -CAFullName $_.FullName -Flag EDITF_ATTRIBUTESUBJECTALTNAME2
     }
 
     # What: Enable ESC11 configuration on all CAs.
     # Why:
-    $EnrollmentServicesWithFullName | ForEach-Object {
+    $EnrollmentServices | ForEach-Object {
         Write-Verbose "Assigning ESC11 configuration to: $($_.Name)"
         Disable-PCInterfaceFlag -CAFullName $_.FullName -Flag IF_ENFORCEENCRYPTICERTREQUEST
     }
 
     #endregion ca issues
 }
-

ADCSGoat/Public/Uninstall-ADCSGoat.ps1

@@ -0,0 +1,62 @@
+function Uninstall-ADCSGoat {
+    [CmdletBinding()]
+    param (
+        [switch]$Randomize
+    )
+
+    #region remove templates
+    # Load the S.DS
+    Add-Type -AssemblyName System.DirectoryServices
+
+    # Get the Configuration partition automatically via RootDSE
+    $RootDSE = New-Object System.DirectoryServices.DirectoryEntry("LDAP://RootDSE")
+    $ConfigurationPartition = $rootDSE.configurationNamingContext
+    $TemplatesContainer = "CN=Certificate Templates,CN=Public Key Services,CN=Services,$ConfigurationPartition"
+    $TemplatePath = New-Object System.DirectoryServices.DirectoryEntry("LDAP://$TemplatesContainer")
+    $AGTemplates = $TemplatePath.Children | Where-Object description -Like '*Generated by ADCSGoat*'
+
+    # Delete each ADCSGoat template
+    foreach ($template in $AGTemplates) {
+        try {
+            Write-Verbose "Attempting to delete template: $($template.Name)"
+            $template.DeleteTree()
+            Write-Verbose "Successfully deleted template: $($template.Name)"
+        } catch {
+            Write-Error "Failed to delete template $($Template.Name): $($_.Exception.Message)"
+        }
+    }
+
+    # Clean up and dispose of the DirectoryEntry objects
+    $TemplatePath.Dispose()
+
+    #endregion remove issues
+
+    #region ca issues
+    # What: Get the list of all Enrollment Services, generate their full CA names, then add the name to the CA object
+    # Why:
+    $EnrollmentServices = Find-AGEnrollmentService
+    $EnrollmentServices | Set-AGEnrollmentServiceFullName
+
+    # What: Disable ESC5 configuration on all CAs.
+    # Why:
+    # $EnrollmentServices | ForEach-Object {
+    #     Write-Verbose "Granting Authenticated Users Full Control of: $($_.FullName)"
+    #     Enable-PCEditFlag -CAFullName $_.FullName -Flag EDITF_ATTRIBUTESUBJECTALTNAME2
+    # }
+
+    # What: Disable ESC6 configuration on all CAs.
+    # Why:
+    $EnrollmentServices | ForEach-Object {
+        Write-Verbose "Assigning ESC6 configuration to: $($_.Name)"
+        Disable-PCEditFlag -CAFullName $_.FullName -Flag EDITF_ATTRIBUTESUBJECTALTNAME2
+    }
+
+    # What: Disable ESC11 configuration on all CAs.
+    # Why:
+    $EnrollmentServices | ForEach-Object {
+        Write-Verbose "Assigning ESC11 configuration to: $($_.Name)"
+        Enable-PCInterfaceFlag -CAFullName $_.FullName -Flag IF_ENFORCEENCRYPTICERTREQUEST
+    }
+
+    #endregion ca issues
+}

docs/en-US/Deploy-AdcsGoat.md docs/en-US/Install-ADCSGoat.mddocs/en-US/Deploy-AdcsGoat.md renamed to docs/en-US/Install-ADCSGoat.md

@@ -5,15 +5,15 @@ online version:
 schema: 2.0.0
 ---
 
-# Deploy-AdcsGoat
+# Install-ADCSGoat
 
 ## SYNOPSIS
 {{ Fill in the Synopsis }}
 
 ## SYNTAX
 
 ```
-Deploy-AdcsGoat [-Randomize] [<CommonParameters>]
+Install-ADCSGoat [-Randomize] [<CommonParameters>]
 ```
 
 ## DESCRIPTION

docs/en-US/Uninstall-ADCSGoat.md

@@ -0,0 +1,60 @@
+---
+external help file: ADCSGoat-help.xml
+Module Name: ADCSGoat
+online version:
+schema: 2.0.0
+---
+
+# Uninstall-ADCSGoat
+
+## SYNOPSIS
+{{ Fill in the Synopsis }}
+
+## SYNTAX
+
+```
+Uninstall-ADCSGoat [-Randomize] [<CommonParameters>]
+```
+
+## DESCRIPTION
+{{ Fill in the Description }}
+
+## EXAMPLES
+
+### Example 1
+```powershell
+PS C:\> {{ Add example code here }}
+```
+
+{{ Add example description here }}
+
+## PARAMETERS
+
+### -Randomize
+{{ Fill Randomize Description }}
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### CommonParameters
+This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
+## INPUTS
+
+### None
+
+## OUTPUTS
+
+### System.Object
+## NOTES
+
+## RELATED LINKS