Certificate Auto-Enrollment Quick Start

If you are an administrator of Verify Privilege Server Suite-managed UNIX or Linux computers, you can use this guide to help you set up a Certificate Authority with the Microsoft Windows certificate auto-enrollment feature to automatically manage certificates for UNIX and Linux computers in your domain. While there are many ways to deploy certificates, this guide describes how to use Active Directory server roles and Windows Group Policy to set up automatic enrollment.

This area includes the following topics:

• Working with a single CA for Unix computers
• Preparing a computer to be a CA
• Adding a trusted root certificate to the group policy
• Enabling auto-enrollment
• Assigning the certificate template to the CA
• Retrieving certificate revocation lists