Manually Requesting Domain Certificates - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Chapter 4. Requesting, Enrolling, and Managing Certificates
NOTE
Profile maps can only be done by editing the registry keys; they cannot be set in the Auto
Enrollment Proxy configuration console.
For reference, the schema for certificate templates is described as
WindowsServer/en/Library/32260bb5-4405-4fda-b589-fe05ac3193201033.mspx?mfr=true
and certificate template setup is covered at
Library/3f5fdc52-8623-4336-840d-e90b2399c8541033.mspx?mfr=true.

4.6.4. Manually Requesting Domain Certificates

The auto enrollment proxy, naturally, automatically enrolls servers, hardware, and even users as soon
as the entity is added to the Windows domain. However, once the auto enrollment proxy for Red Hat
Certificate System is configured, it is also possible to request and receive certificates manually on a
Windows domain through a Certificate System CA.
Certificates can be requested using the Microsoft Management Console (MMC) or using the Windows
certreq tool.
4.6.4.1. Requesting Certificates through MMC
1. Open MMC
2. Open Certificates (Local Computer) -> Persona
3. Right click the right panel, and select Request New Certificate. This opens a certificate request
wizard.
112
http://technet2.microsoft.com/WindowsServer/en/
http://technet2.microsoft.com/