What should you do?
Which Group Policy settings should you configure?
What should you use?
Which script should you run?
Which tool should you use?
Which cmdlet should you add to the script?
Which format should you use to export the certificate?