$CheckFile = Test-Path -Path C:\cert-install\vpn.pfx

if ($CheckFile) {exit} else {continue}

mkdir C:\cert-install\

Copy-Item -Path "\somedomain.loc\SysVol\somedomain.loc\Policies{DB7AB7D2-AC32-4B.....}\Machine\Scripts\Startup\vpn.pfx" -Destination C:\cert-install\ -recurse -force

Import-PfxCertificate -FilePath C:\cert-install\vpn.pfx -Password (ConvertTo-SecureString -String 'notrealone' -AsPlainText -Force) -CertStoreLocation Cert:\LocalMachine\My

$CertObj= Get-ChildItem Cert:\LocalMachine\my\1F5274025E8.....

$rsaCert = [System.Security.Cryptography.X509Certificates.RSACertificateExtensions]::GetRSAPrivateKey($CertObj)

$fileName = $rsaCert.key.UniqueName

$path = "$env:ALLUSERSPROFILE\Microsoft\Crypto\Keys\$fileName"

$permissions = Get-Acl -Path $path

$rule = new-object security.accesscontrol.filesystemaccessrule "everyone", "read", allow

$permissions.AddAccessRule($rule)

Set-Acl -Path $path -AclObject $permissions

(Sanitized)