Solved

How do I issue/deploy user and computer certificate to a client from Windows 2008 Certificate Authority?

Posted on 2010-11-24
4
873 Views
Last Modified: 2013-12-04
First of all. I am not a Microsoft-guy. I work with networks and communications.

I need to test certificate-authentication of 802.1x. For this reason I have a newly installed win2008 server (in lab environment) which is also a DC for my test-AD. I have installed the Certificate Authority-component in windows. I have also a Windows 7 client computer which I have joined my test-AD.

But how do I create and put a computer certificate to my client computer? And also a user-certificate? Is it tricky to do it automatic via GPO-policies? Or can I request a certificate manually from the computer?

Again, this doesnt need to scale. It is lab only. I dont need the most beautiful solution. I just need to put those certificates on the client computer.

Anyone?

/Kvistofta
0
Comment
Question by:Kvistofta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 9

Expert Comment

by:losip
ID: 34204210
Easiest way is to browse to http://<name of of server>/certsrv and follow the instructions
0
 
LVL 17

Author Comment

by:Kvistofta
ID: 34204543
I didnt have IIS installed. And after adding the web server role the server responds but there is no /certsrv configured.

404 - File or directory not found.

How do I solve this?

/Kvistofta
0
 
LVL 9

Expert Comment

by:losip
ID: 34204559
Best to uninstall Cert Services and reinstall, I would think.  If you want to keep your present configuration and any certificates already issued, then do a backup first from the Certification Authority admin tool and then restore afterwards.  If you need more help with this, please ask.
0
 
LVL 9

Accepted Solution

by:
losip earned 500 total points
ID: 34204609
Just looking at Server Manager, you might be able to get away with just adding the Role Services: "Certification Authority Web Enrollment" and "Certificate Enrollment Policy Web Service" if they're not already there.
0

Featured Post

What, When and Where - Security Threats from Q1

Join Corey Nachreiner, CTO, and Marc Laliberte, Information Security Threat Analyst, on July 26th as they explore their key findings from the first quarter of 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question