Computer: Computer ConfigurationWindows SettingsSecurity SettingsPublic Key PoliciesCertificate Service Client – Auto-enrollment.(And just a reminder certificate auto-enrollment is only possible with version 2 certificate templates and these are only available with a Windows Server 2003 Enterprise based Certificate Authority or newer, and a domain with the Windows Server 2003 schema or newer.)Īuto-enrollment is configured through Group Policy and can be set for both types of subjects users and computers. A subject in this case can be either a user account or a machine account. The subject does not need to be aware of any certificate operations, unless you configure the certificate template to interact with the subject. It allows the administrator to configure subjects to automatically enroll for certificates, retrieve issued certificates, and renew expiring certificates without requiring subject interaction. Auto-enrollment is a useful feature of Active Directory Certificate Services (AD CS).
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |