Share via

Client Access Licenses - Active Directory Certificate Services

Anonymous
2024-03-08T08:32:43+00:00

Do we require Client Access Licenses on a Enterprise Intermediate certificate authority issuing autoenrollment certificates to clients in our domain? If we do need CALs do we need device CALs to only cover concurrent connections or to cover every device that could possibly connect?

I have spent a lot of time going through the MS website this morning trying to find an answer but I haven't been able to find anything meaningful. If there are any useful references or licenses guides for ADCS links would be appreciated.

Windows Server Identity and access Certificates and public key infrastructure (PKI)

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments
Accepted answer
  1. Anonymous
    2024-03-11T06:44:55+00:00

    Hi tmorgan_mcs,

    Thank you for posting in the Microsoft Community Forum.

    Typically, in a Windows domain environment, a dedicated client access license is not required to issue an auto-enrollment certificate for clients in a domain. Enterprise intermediate certificate authorities (CAs) are typically responsible for issuing certificates, and in a Windows domain, domain administrators have sufficient privileges to manage and configure certificate services.

    Hello, here is the relevant documentation about CAL:License your RDS deployment with client access licenses (CALs) | Microsoft Learn

    Best regards

    Neuvi Jiang

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more