What are the methods for distributing the root certificate ?

Question

Hello. I have installed AD CS on a separate virtual machine.

After that I noticed that my clients are not getting the certificate.

I ran the command:

After rebooting, my client got a root certificate.

After this command, I can see it:

What is it and how does it work?

1. How does it work ?
2. What other methods are there ? How do they work ?
3. what is recommended ?

Answer 1

Hello Андрей Михалевский,

Thank you for posting in Q&A forum.

Based on the description "I have installed AD CS on a separate virtual machine", did you install offline standalone AD CS on one machine in workgroup (not in one domain)?

How does it work?
A1: If it is offline standalone AD CS on one machine in workgroup (not in one domain), you need to publish it to AD Domain Controller as you are doing.

What other methods are there? How do they work?

A2: I think you are using the right method.

what is recommended?
A3: See A2.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.