我有第三方颁发的证书，我需要确保在给定的域中的所有目标上运行。 有没有办法确保通过DSC安装证书？
在DSC中目前没有内置的方法。 我为我的组织编写了一个自定义资源，用于安装来自PFX的证书。 我使用了Cert: PSDrive， Import-PfxCertificate cmdlet和DSC中的安全证书 （对于PFX密码）。
这现在住在微软的资源！ xPfxImport资源位于xCertificate模块v1.1 （假定更新）中。
也写在我自己的博客上 。
再次感谢鼓励（尤其是jscott ）。
如何使用组策略将证书部署到域中？ http://technet.microsoft.com/en-us/library/cc770315%28v=ws.10%29.aspx
使用组策略部署证书
Open Group Policy Management Console. Find an existing or create a new GPO to contain the certificate settings. Ensure that the GPO is associated with the domain, site, or organizational unit whose users you want affected by the policy. Right-click the GPO, and then select Edit. Group Policy Management Editor opens, and displays the current contents of the policy object. In the navigation pane, open Computer Configuration\Windows Settings\Security Settings\Public Key Policies\Trusted Publishers. Click the Action menu, and then click Import. Follow the instructions in the Certificate Import Wizard to find and import the certificate. If the certificate is self-signed, and cannot be traced back to a certificate that is in the Trusted Root Certification Authorities certificate store, then you must also copy the certificate to that store. In the navigation pane, click Trusted Root Certification Authorities, and then repeat steps 5 and 6 to install a copy of the certificate to that store.