https://www.petervanderwoude.nl/post/key-configurations-steps-for-implementing-the-ability-to-deploy-certificate-profiles-with-configmgr-2012/