Hey everyone! I created the PSServicePrincipal PowerShell module that is a helper module that will reduce the onboarding steps for Certificate Based Authentication to just to a few steps and you can do that from PowerShell command line itself. To fully automate this you must have sufficient permissions to register an application with your Azure AD tenant. The module will handle the creation of the service principal / application, certificate (local and Azure) and set the correct Exchange unattended application permissions. All you need to do is verify a RBAC role for security and accept the settings. You can download the module from the PowerShell Gallery here. The full help file can be found here.