<div>
Are you referring to Workstation Authentication certs or User certs?<br />
<br />
If these are Workstation certs, setup auto enrollment.<br />
<br />
Link: &nbsp;<a href="https://technet.microsoft.com/en-us/library/cc731522.aspx" rel="ugc">https://technet.microsoft.com/en-us/library/cc731522.aspx</a><br />
<br />
Dan
</div>


<div>
only few workstations enrolls. CA certificate for authenticating to VPN appliances,<br />
<br />
some of them are not connect to the domain....
</div>


<div>
<div class="content wysiwyg-content">
Some of the users has generate a client certificate on my Window 2012 CA server. If the user's PC is crashed, can I export the certificate from the CA. will the CA contain the private key in the export ?<br />
<br />
For certificate renewal on client certificate, is it possible to renew the expired certificate on CA without touching the user's PC ?<br />
<br />
Thx
</div>
</div>


Some of the users has generate a client certificate on my Window 2012 CA server. If the user's PC is crashed, can I export the certificate from the CA. will the CA contain the private key in the export ?

For certificate renewal on client certificate, is it possible to renew the expired certificate on CA without touching the user's PC ?

Thx

Are you referring to Workstation Authentication certs or User certs?

If these are Workstation certs, setup auto enrollment.

Link:  https://technet.microsoft.com/en-us/library/cc731522.aspx

Dan

only few workstations enrolls. CA certificate for authenticating to VPN appliances,

some of them are not connect to the domain....

Export CA certificate

Some of the users has generate a client certificate on my Window 2012 CA server. If the user&amp;#39;s PC is crashed, can I export the certificate from the CA. will the CA contain the private key in the export ?

For certificate renewal on client certificate, is it possible to renew the expired certificate on CA without touching the user&amp;#39;s PC ?

Thx

Windows Server 2012 is the server version of Windows 8 and the successor to Windows Server 2008 R2. Windows Server 2012 is the first version of Windows Server to have no support for Itanium-based computers since Windows NT 4.0. Windows Server 2012, now in its second release (Windows Server 2012 Release 2) includes Foundation, Essentials, Standard and Datacenter, and does not support IA-32 or IA-64 processors.