Certificate deployment wizard

Generate a secret-free script for Windows certificate profiles. The platform never runs it. Use your own administrator session in the customer Cloud Shell. Default execution is read-only.

CA creation, other platforms, Wi-Fi and wired profiles are unproven and cannot be generated. Device enrollment remains unproven. Profiles are never assigned automatically.