[CmdletBinding()]
param()

#"Setting Execution Policy to Remote Signed"
#Set-ExecutionPolicy RemoteSigned -Force
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

"Setting up Powershell Gallery to Install DSC Modules"
Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5 -Force
Set-PSRepository -Name PSGallery -InstallationPolicy Trusted

"Installing the needed Powershell DSC modules for this Quick Start"
Install-Module -Name NetworkingDsc -RequiredVersion 8.0.0
Install-Module -Name ActiveDirectoryDsc -RequiredVersion 6.0.1
Install-Module -Name ComputerManagementDsc -RequiredVersion 8.4.0
Install-Module -Name xDnsServer -RequiredVersion 1.16.0.0
Install-Module -Name ActiveDirectoryCSDsc -RequiredVersion 5.0.0
Install-Module -Name xActiveDirectory -RequiredVersion 2.21.0.0
Install-Module -Name xPSDesiredStateConfiguration -RequiredVersion 9.1.0

"Disabling Windows Firewall"
Get-NetFirewallProfile | Set-NetFirewallProfile -Enabled False

"Creating Directory for DSC Public Cert"
New-Item -Path C:\CWE\publickeys -ItemType directory 

"Setting up DSC Certificate to Encrypt Credentials in MOF File"
$cert = New-SelfSignedCertificate -Type DocumentEncryptionCertLegacyCsp -DnsName 'AWSQSDscEncryptCert' -HashAlgorithm SHA256

# Exporting the public key certificate
$cert | Export-Certificate -FilePath "C:\CWE\publickeys\AWSQSDscPublicKey.cer" -Force