Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How do I issue/deploy user and computer certificate to a client from Windows 2008 Certificate Authority?

Posted on 2010-11-24
4
Medium Priority
?
874 Views
Last Modified: 2013-12-04
First of all. I am not a Microsoft-guy. I work with networks and communications.

I need to test certificate-authentication of 802.1x. For this reason I have a newly installed win2008 server (in lab environment) which is also a DC for my test-AD. I have installed the Certificate Authority-component in windows. I have also a Windows 7 client computer which I have joined my test-AD.

But how do I create and put a computer certificate to my client computer? And also a user-certificate? Is it tricky to do it automatic via GPO-policies? Or can I request a certificate manually from the computer?

Again, this doesnt need to scale. It is lab only. I dont need the most beautiful solution. I just need to put those certificates on the client computer.

Anyone?

/Kvistofta
0
Comment
Question by:Kvistofta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 9

Expert Comment

by:losip
ID: 34204210
Easiest way is to browse to http://<name of of server>/certsrv and follow the instructions
0
 
LVL 17

Author Comment

by:Kvistofta
ID: 34204543
I didnt have IIS installed. And after adding the web server role the server responds but there is no /certsrv configured.

404 - File or directory not found.

How do I solve this?

/Kvistofta
0
 
LVL 9

Expert Comment

by:losip
ID: 34204559
Best to uninstall Cert Services and reinstall, I would think.  If you want to keep your present configuration and any certificates already issued, then do a backup first from the Certification Authority admin tool and then restore afterwards.  If you need more help with this, please ask.
0
 
LVL 9

Accepted Solution

by:
losip earned 2000 total points
ID: 34204609
Just looking at Server Manager, you might be able to get away with just adding the Role Services: "Certification Authority Web Enrollment" and "Certificate Enrollment Policy Web Service" if they're not already there.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

660 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question