Summary
In this module you learned how to choose AD CS enrollment methods, configure autoenrollment, and manage INF-based requests with certreq.exe. You explored CEP/CES for remote and non-domain clients and NDES/SCEP for managed devices. You also learned how to protect private keys, diagnose enrollment failures, renew or replace certificates, verify their use by services, and retire obsolete credentials safely.