Dell iDRAC generate CSR and Certificate using Microsoft CA

#working with racadm Dell iDRAC
# generate CSR and request new certificate usin Web Enrollment Microsoft CA
$user=read-host -Prompt "Username"
$password=read-host -Prompt "Password"
function fn {
   $racadmpath="C:\Program Files\Dell\SysMgt\rac5\racadm.exe"
   & $racadmpath $args
}
set-alias racadm fn
function fn2 {
   $racadmpath="certreq"
   & $racadmpath $args
}
set-alias certrec fn2
$file=import-csv RACDevices.csv
$domain=read-host
$CA="Microsoft Web CA Here"
$template="TemplateName"
foreach ($entry in $file) {
$server=$entry.Name
$ServerFQDN="$server.$domain"
$cfg="$server.cfg"
$req="$server.req"
$cert="$server.cer"
# Certificate request parameters
$certrq="[cfgRacSecurity]
cfgRacSecCsrKeySize=2048
cfgRacSecCsrCommonName=$serverFQDN
cfgRacSecCsrOrganizationName=Organization
cfgRacSecCsrOrganizationUnit=OU
cfgRacSecCsrLocalityName=Location
cfgRacSecCsrStateName=unknown
cfgRacSecCsrCountryCode=RU
cfgRacSecCsrEmailAddr=email@example.com"
$certrq | out-file $cfg -Encoding ascii
#racadm -u $user -p $password -r $serverFQDN racreset soft
racadm -u $user -p $password -r $serverFQDN config -f $cfg
racadm -u $user -p $password -r $serverFQDN getconfig -g cfgRacSecurity
racadm -u $user -p $password -r $serverFQDN sslcsrgen -f $req -g
#read-host
certreq -config $CA -submit -attrib "CertificateTemplate:$template\nSAN:DNS=$server&DNS=$serverFQDN" $req $cert
racadm -u $user -p $password -r $serverFQDN sslcertupload -t 1 -f $cert
remove-item $cfg
}