How to renew computer serfificates in AD gp based system before term ends?

Matti Tauriainen 21 Reputation points
2020-08-25T09:48:15.613+00:00

Hello.

We have internal CA server and AD based distibution of certificates to computers by group policy.
I'ts all good and fine, but now we had to edit computer certificate template
for certificate based autentication to network with radius. (yes we use computer certificates not user sertificates)

This works also fine when i manually update computer certificate from client side by certificates mmc.

But how can I command all computers to update their sertificates mid term
so all of them get new sertificates with modified field?
(change of SUBJECT fied from empty to DNS name)

Matti T

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,741 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,720 questions
Accepted answer
  1. Vadims Podāns 8,866 Reputation points MVP
    2020-08-25T12:35:34.343+00:00

    If you use certificate autoenrollment, then go to affected certificate template (in certtmpl.msc), right-click on it, Reenroll all certificate holders menu item. When autoenrollment triggers next time (within 1 day), it will detect that existing certificate must be renewed out of standard AE renewal schedule and will reenroll the certificate from updated template.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest