Share via

How is the root certificate distributed?

Андрей Михалевский 3,451 Reputation points
2022-09-19T10:50:37.953+00:00

Hi. I did a basic AD CS installation. Next next finish. After restarting the client, I see it has a root certificate.

Please explain how this mechanism works.

Windows for business Windows Client for IT Pros Directory services Active Directory

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 44,746 Reputation points
    2022-09-21T15:05:01.973+00:00

    Hello

    Thank you for your question and reaching out. I can understand you are having query related to root certificate distributed windows.

    You must publish the root certificate into AD if the root CA is an offline root CA (standalone root CA).

    RootCACertifice: certutil -dspublish RootCA

    The certificate will then be distributed using the autoenrollment settings to the trusted root store of every domain joined client.

    This will finally happen automatically if the root CA was joined to the domain, although it may take up to 8 hours (default GPO application time). Restarting a client computer will compel it to accept the root CA certificate. Normally, I give distribution time for an overnight period.

    -----------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.