How to create an S/MIME certificate store on Windows Server 2019 and how to use it?

Question

Windows

How to create an S/MIME certificate store on Windows Server 2019 and how to use it?

We need to create a database of external S / MIME certificates on the server, and how do domain users get it on their computers.

We don't use IIS or Exchange. There are descriptions for IIS+Exchange Server, but we don't need them.

It is desirable that each user has access to his local certificate (MMC->Zertifikate->actuelle Benutzer->Eigene Zertifikate->Zertifikate->list of his certificates, including obsolete ones), several root certificates (->Vertrauenswürdige Stammzertifizierungstellen->Zertifikate ->a couple added), and a large list of external certificates (->Andere Personen->Zertifikate->miscellaneous certificates).

Now for each user in Outlook 2016 we create our own list of certificates in the Zertfikat-Snap-In-> Eigenes Benutzerkonto mode and then we individually put the local user certificate in Eigene Zertifikate (we take once a year from Actalis), a couple of certificates from Jobcenter in Vertrauenswürdige Stammzertifizierungstellen , and then paste the certificates we need from the Jobcenter into Outlook->Kontakte (there is an opportunity to request a certificate for the desired address, and then paste the saved .cer file into the Zertifikate field). But all this adds a lot of headaches to us ...

How can all this be automated?

Answer 1

How can all this be automated?

e.g. PowerShell and Power Automate