Solved

Computer Certs for Workgroup Computers

Posted on 2013-12-02
7
1,039 Views
Last Modified: 2014-01-01
I am trying to install computer certs for Workgroup Computers so I can enable secure RDP for PCI compliance.  I have a Windows 2012 Internal CA that is issuing certs for domain computers and I can request Web Server certs through the browser.  What am I missing to get computer certs to Workgroup servers?
0
Comment
Question by:paulymo
  • 4
  • 3
7 Comments
 
LVL 76

Expert Comment

by:arnold
ID: 39691646
Nothing, they (workgroup computers/users) have to be manually request and install the certificates issued by the CA.
0
 

Author Comment

by:paulymo
ID: 39692484
How do I manually request it?
0
 
LVL 76

Expert Comment

by:arnold
ID: 39694282
Using a webbrowser navigate to http://CAserver/certsrv there you can choose the type of certificate you need and is based on the templates you approved/configured on the CA.

Once submitted, you will have a certificate to download/install.
If you have configured the CA to place requests in a pending queue, you would need to approve the pending certificate.

certreq can be used to generate a CSR that is then submitted to the CA's certsrv site for signing.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:paulymo
ID: 39699623
Thanks Arnold for your response.  So far I am aware of everything you have suggested but do not see a computer cert available.  Any suggestions on creating a computer cert from a template for workgroup computers?
0
 
LVL 76

Expert Comment

by:arnold
ID: 39700172
Within the CA you can configure the template s available on the CA.
If you as administrator navigate to http://server/certsrv.
To enroll.  Certutil,certreq are command line tools.

http://technet.microsoft.com/en-us/library/cc770794(v=ws.10).aspx

The difficulty is knowingtefunctionlity/attributes that might be needed.
0
 

Accepted Solution

by:
paulymo earned 0 total points
ID: 39742333
I had to install the ADCS Certificate Enrollment Web Service and ADCS Certificate Enrollment Policy Web Service Server roles to make this work.
0
 

Author Closing Comment

by:paulymo
ID: 39749623
No other solutions worked.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Two factor authentication 6 54
Robocopy Question 7 42
Do we need servers??? 5 128
Using New-PsDrive from Task Scheduler 7 10
This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
It’s a strangely common occurrence that when you send someone their login details for a system, they can’t get in. This article will help you understand why it happens, and what you can do about it.
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now