User and computer certificate from CA

Question

HI,

I deployed new CA server in our environment. I can see new certificate from CA on Domain controller on same network. but certificate is not available on another network Domain controller.

plus I was to use CA for users and computer certificates using GPO. can you please guide me on this. what are the port requirements. as CA is deployed on a separate network. the purpose of certificate is authentication for wifi access.

Regards

Answer 1

Hi,

For this you will need to create Certificate Enrollment policies in the SubCA so users and devices can enroll Certs based on the template you published.

Also check the Template enrollment here - 53249.active-directory-certificate-services-enterprise-ca-architecture.aspx

always-vpn-how-configure-pki-distribute-certificates

UserComputerCerts.htm

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi Jimmy

Thank you for quick reply. I have enabled autoenrollment but cannot see the certificates on the client. even cant see any pending request in CA. need guidance how to troubleshoot or how can diagnose the problem?

Regards