Hello Ramon,
1
PFXEncryptionKey should be the same for Add-IntuneKspKey and New-IntuneUserPfxCertificate.
I made use of this "PFXEncryptionKey" exactly value, but probubly you can change it.
2
The New-IntuneUserPfxCertificate command has the following parameters:
PathToPfxFile: The full folder path (including the drive letter) and file name of the PFX file.
SecureFilePassword: The password of the PFX file.
UserPrincipalName: The user name of the user that the system will deliver the certificate to (typically, an email address).
ProviderName: The name of the key storage provider.
KeyName: The name of the key.
Usage: The intended usage of the certificate.