Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1371
  • Last Modified:

Computer Certs for Workgroup Computers

I am trying to install computer certs for Workgroup Computers so I can enable secure RDP for PCI compliance.  I have a Windows 2012 Internal CA that is issuing certs for domain computers and I can request Web Server certs through the browser.  What am I missing to get computer certs to Workgroup servers?
0
paulymo
Asked:
paulymo
  • 4
  • 3
1 Solution
 
arnoldCommented:
Nothing, they (workgroup computers/users) have to be manually request and install the certificates issued by the CA.
0
 
paulymoAuthor Commented:
How do I manually request it?
0
 
arnoldCommented:
Using a webbrowser navigate to http://CAserver/certsrv there you can choose the type of certificate you need and is based on the templates you approved/configured on the CA.

Once submitted, you will have a certificate to download/install.
If you have configured the CA to place requests in a pending queue, you would need to approve the pending certificate.

certreq can be used to generate a CSR that is then submitted to the CA's certsrv site for signing.
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
paulymoAuthor Commented:
Thanks Arnold for your response.  So far I am aware of everything you have suggested but do not see a computer cert available.  Any suggestions on creating a computer cert from a template for workgroup computers?
0
 
arnoldCommented:
Within the CA you can configure the template s available on the CA.
If you as administrator navigate to http://server/certsrv.
To enroll.  Certutil,certreq are command line tools.

http://technet.microsoft.com/en-us/library/cc770794(v=ws.10).aspx

The difficulty is knowingtefunctionlity/attributes that might be needed.
0
 
paulymoAuthor Commented:
I had to install the ADCS Certificate Enrollment Web Service and ADCS Certificate Enrollment Policy Web Service Server roles to make this work.
0
 
paulymoAuthor Commented:
No other solutions worked.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now