In this post, we'll discuss how to use the Certificate Enrollment Web Interface that we installed back in Part 2 of this series. The web interface doesn't seem to be widely used since the Certificates MMC snap-in does most of the work, but it's useful to know it's there.

Finally – the moment you’ve been waiting for!  Issuing Certificates!  We’re going to cover three enrollments for our three different certificate templates created in Part 4.

In this part of the series, we’re going to start getting ready to issue some certificates, and we’re going to do that by creating some Certificate Templates.  This can be done from any workstation that has domain access and has the Certificate Templates console installed (part of the Remote Server Administration …

In this post we’re going to setup the trust for your Root Certificate in your environment. If we think about what we talked about back in Part 1 of this series, you’ll remember that once we trust the guy at the top, we trust anyone down the chain as well.  By trusting your Root Certificate, we automatically trust your …

I'd like to tie together everything we've done so far.  If you're following along, you've probably gotten through standing up two servers in a lab environment in under 30 minutes, but perhaps without understanding the implications of the changes you've made along the way. We're not going to make any changes to your …

In this post, we'll stand up a subordinate Certificate Authority server.  This will be your domain joined, always online server that will actually hand out the certificates to clients.

Let's start with a basic understanding of Certificate Authorities.  You can skip this part if you're not interested, but personally I find it easier to wrap my head around things when I understand them better.  The biggest concept to understand with a CA environment is chains of trust.  Essentially, you trust the …

The following AutoIt script will allow you to set the Microsoft Office Registered User Name, Initials, and Company via a script by getting the name information from Active Directory and modifying the keys . This is useful in corporate environments where you don’t want it to have a generic name when you’re being told …