Vadims Podans

I've tried the `Microsoft Platform Crypto Provider` provider and indeed it writes to TPM and accessible from `Microsoft Smart Card Key Storage Provider`.

> Is there any documentation outlining least user privileges for each cmdlet? no, there is no such documentation. > I'm finding that many tasks fail to execute if the account...

It is a bug. There is an unnecessary check for CA admin permission.

First issue (certificate template reading) is fixed. I'm investigating second issue and will update the issue when fix it.

Both issues are now resolved. Fix will be added to next PSPKI release

Fixed in [v4.0.0](https://github.com/PKISolutions/PSPKI/releases/tag/v4.0.0)

Closing as stale. No response from OP.

Fixed in [v4.0.0](https://github.com/PKISolutions/PSPKI/releases/tag/v4.0.0)

Fixed in [v4.0.0](https://github.com/PKISolutions/PSPKI/releases/tag/v4.0.0)

Closed as stale.