Create a Self-Signed Certificate for EXO Authentication

$certName = "Azure EXO Cert"
$certPath = "Cert:\LocalMachine\My"
$exportPath = "C:\Temp"

# Create export folder if it doesn't exist
if (!(Test-Path -Path $exportPath)) {
    New-Item -Path $exportPath -ItemType Directory | Out-Null
}

# Create the self-signed certificate
$cert = New-SelfSignedCertificate `
    -Subject "CN=$certName" `
    -KeyAlgorithm RSA `
    -KeyLength 2048 `
    -KeyExportPolicy Exportable `
    -KeySpec Signature `
    -CertStoreLocation $certPath `
    -NotAfter (Get-Date).AddYears(2) `
    -HashAlgorithm SHA256 `
    -FriendlyName $certName

# Export the public certificate (.cer) for Azure AD
Export-Certificate `
    -Cert $cert `
    -FilePath "$exportPath\$certName.cer" `
    -Force

# Define and secure the password for the private key
$plainPassword = "<ENTER PASSWORD>"
$securePassword = ConvertTo-SecureString -String $plainPassword -Force -AsPlainText

# Export the private certificate (.pfx) with the secure password
Export-PfxCertificate `
    -Cert $cert `
    -FilePath "$exportPath\$certName.pfx" `
    -Password $securePassword `
    -Force