Certificate enrollment and renewal

Advanced

Administrator

Identity and Access Administrator

Windows Server

Learn how to select, configure, diagnose, renew, replace, and retire certificates issued by Active Directory Certificate Services.

Learning objectives

In this module, you'll:

Select an enrollment method from identity, policy, key custody, renewal, network, and assurance requirements.
Configure user and computer autoenrollment and evaluate discovery, policy refresh, pending requests, renewal, and supersedence.
Execute a file-based certreq.exe lifecycle and diagnose each enrollment stage independently.
Design web-based certificate enrollment for domain, non-domain, remote, renewal-only, and key-based-renewal boundaries.
Design network device enrollment as a separate registration authority with controlled challenge, service, web server, transport security, and template mappings.
Replace certificates after identity, provider, algorithm, key-size, or template changes; prove the active certificate and retire the old one.

Familiarity with Active Directory Certificate Services, certificate templates, Windows Server administration, and public key infrastructure concepts.