Manage Certificates

Question 1

How do you view certificate templates?

Answer 1

1. Open Certification Authority

2. Right click on Certificate Templates and select Manage

Question 2

How do you issue a certificate template?

Answer 2

Within CA, right click on Certificate Template and select New > Certificate to issue

Question 3

How do you configure auto enrollment for certificates using Group Policy?

Answer 3

Navigate to GPME > Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies

Open the properties of the Certificate Services Client - Auto Enrollment Policies

Question 4

How do you configure key archival and recovery?

Answer 4

1. Within Certificate Templates console, open the Key Recovery Agent’s Properties
2. On the Issuance tab, uncheck the box that says, “CA certificate manager approval”
3. Issue the updated KRA template
4. Request a new certificate for the KRA template
5. Within CA, right click on CA server > Properties
6. On the Recovery Agents tab, select the “Archive the key” radial button and add the KRA cert