Computer Certificate Enrollment and Renewal

Key-based renewal

certreq -machine -q -enroll -cert <thumbprint> renew

 

Enrollment

Locate enterprise CA

a) find out CA name and server

certutil -config - -ping

b) find out more info about CA and CA type

certutil – dump

In the output of the command above we can find out more information about the type of the CA (enterprise/standalone, root/subordinate…. see Types of Certification Authorities)

 certutil -cainfo -config <paste the config: line output from certutil -dump> type

Web based enrollment

URL of your Certificate Services server (eg https://ca-server/certsrv).

 

via Test Lab Guide: Demonstrating Certificate Key-Based Renewal, Renew a certificate, Requesting a certificate from a local certification authority, Test Lab Guide: Demonstrating Certificate Key-Based Renewal, Certification Authority Web Enrollment Guidance

Advertisements

Tagged: ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

smsagent

Tips, tricks and time-savers for the Windows and ConfigMgr administrator

To The Point

Anything about Technology and Business

Brian's Power Windows Blog

Microsoft in the Enterprise. Windows, Hyper-V, Exchange, SQL, and more!

PowerScripting Podcast

Shownotes and links for the PowerScripting Podcast, a podcast to help people learn Windows Powershell

Learn Powershell | Achieve More

What is this Powershell of which you speak?

%d bloggers like this: