{"id":1212,"date":"2013-12-11T11:35:46","date_gmt":"2013-12-11T17:35:46","guid":{"rendered":"http:\/\/www.poweradmin.com\/blog\/?p=1212"},"modified":"2015-04-24T16:52:10","modified_gmt":"2015-04-24T21:52:10","slug":"part-2-how-to-configure-a-public-key-infrastructure-on-a-windows-server","status":"publish","type":"post","link":"https:\/\/www.poweradmin.com\/blog\/part-2-how-to-configure-a-public-key-infrastructure-on-a-windows-server\/","title":{"rendered":"Configuring a Public Key Infrastructure-Pt. 2"},"content":{"rendered":"

\n\tPart 2, Continued from \"<\/span>How to Configure a Public Key Infrastructure on a Windows Server \u2013 Part 1<\/span><\/a>\"<\/span><\/em><\/span><\/span>\n<\/p>\n

\n\tEnable<\/em> the policy and check the Renew expired certificates, update pending certificates and remove revoked certificates<\/em> and update certificates that use certificate templates<\/em> check-boxes:<\/span><\/span>\n<\/p>\n

\n\t\"Certificate<\/a>\n<\/p>\n

\n\tNow we have to configure certificate templates for auto-enrollment. Open the Certification Authority <\/em>console, navigate to the Certificate Templates <\/em>section, right click <\/em>and select Manage<\/em>:<\/span><\/span>\n<\/p>\n

\n\t\"Certificate<\/a>\n<\/p>\n

\n\t\u00a0\n<\/p>\n

\n\tFrom the Certificate Template<\/em> section right click the Computer <\/em>template and select Properties:<\/em><\/span><\/span>\n<\/p>\n

\n\t\"Certificate<\/a>\n<\/p>\n

\n\tNavigate to the Security<\/em> tab and add the users or security groups that will be able to enroll these certificate types. I\u2019ve added the Domain Users<\/em> group and set the Read<\/em> and Enroll <\/em>permissions:<\/span><\/span>\n<\/p>\n

\n\t\"Domain<\/a>\n<\/p>\n

\n\tWe\u2019ve finished the CA auto-enrollment configuration. Remember that all wireless clients must trust this CA in order to request and renew certificates. Because we\u2019ve deployed the PKI within our Active Directory Domain, all machines will receive a certificate for the CA in the Trusted Root Certification Authorities:<\/span><\/span>\n<\/p>\n

\n\t\"Trusted<\/a>\n<\/p>\n

\n\tAfter configuring the CA, you\u2019ll need to configure the RADIUS server for this authentication type and all your wireless computers will be able to authenticate using certificates.<\/span><\/span>\n<\/p>\n

\n\tThat\u2019s it for this article folks, hope you\u2019ve enjoyed it. If any of this is unclear, please post any questions and we will respond as soon as possible. Don\u2019t forget to rate this article and share it to others. Enjoy your day and stay tuned for following articles.<\/span><\/span>\n<\/p>\n

\n\t\u00a0\n<\/p>\n

\n\t\"Tweet<\/a>\n<\/p>\n

\n\t\"Share<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Part 2, Continued from “How to Configure a Public Key Infrastructure on a Windows Server \u2013 Part 1” Enable the policy and check the Renew expired certificates, update pending certificates and remove revoked certificates and update certificates that use certificate templates check-boxes: Now we have to configure certificate templates for auto-enrollment. Open the Certification Authority […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,13,9,8],"tags":[],"class_list":["post-1212","post","type-post","status-publish","format-standard","hentry","category-how-to","category-pc-security","category-technical","category-windows"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t