Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Computer Certs for Workgroup Computers

Posted on 2013-12-02
7
Medium Priority
?
1,319 Views
Last Modified: 2014-01-01
I am trying to install computer certs for Workgroup Computers so I can enable secure RDP for PCI compliance.  I have a Windows 2012 Internal CA that is issuing certs for domain computers and I can request Web Server certs through the browser.  What am I missing to get computer certs to Workgroup servers?
0
Comment
Question by:paulymo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 79

Expert Comment

by:arnold
ID: 39691646
Nothing, they (workgroup computers/users) have to be manually request and install the certificates issued by the CA.
0
 

Author Comment

by:paulymo
ID: 39692484
How do I manually request it?
0
 
LVL 79

Expert Comment

by:arnold
ID: 39694282
Using a webbrowser navigate to http://CAserver/certsrv there you can choose the type of certificate you need and is based on the templates you approved/configured on the CA.

Once submitted, you will have a certificate to download/install.
If you have configured the CA to place requests in a pending queue, you would need to approve the pending certificate.

certreq can be used to generate a CSR that is then submitted to the CA's certsrv site for signing.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:paulymo
ID: 39699623
Thanks Arnold for your response.  So far I am aware of everything you have suggested but do not see a computer cert available.  Any suggestions on creating a computer cert from a template for workgroup computers?
0
 
LVL 79

Expert Comment

by:arnold
ID: 39700172
Within the CA you can configure the template s available on the CA.
If you as administrator navigate to http://server/certsrv.
To enroll.  Certutil,certreq are command line tools.

http://technet.microsoft.com/en-us/library/cc770794(v=ws.10).aspx

The difficulty is knowingtefunctionlity/attributes that might be needed.
0
 

Accepted Solution

by:
paulymo earned 0 total points
ID: 39742333
I had to install the ADCS Certificate Enrollment Web Service and ADCS Certificate Enrollment Policy Web Service Server roles to make this work.
0
 

Author Closing Comment

by:paulymo
ID: 39749623
No other solutions worked.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows Server 2003 introduced persistent Volume Shadow Copies and made 2003 a must-do upgrade.  Since then, it's been a must-implement feature for all servers doing any kind of file sharing.
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question