After you deploy see you should perform several tasks to configure it and to manage it properly later.
SC is a very important service so you should manage it carefully.
After deploying SCA hierarchy you should verify the safe security configuration to ensure which users
and groups are allowed to perform administrative tasks on that.
Additionally it is important that you configure log in and monitor and options for receipt so that you
look or all important tasks and activities you can configure.
The most common see management options if you use the certification authority counsel however you also
can use Windows power shell and the cert you till come online tool to manage various advanced sea options
and to perform some tasks that are not available in a graphical council.
Now let's review windows power shall come on lads for deploying and administering SC Windows Server
2016 provides several windows power shall come on lads for ADC as deployment and administration and
Windows Server at the ADC as deployment and ADC s administration windows power shall modules are available
to deploy and administer CS if you have already installed their adc s binaries you can import their
modules for use in Windows power shell by Iran and the following commands.
Import module ADC of deployment and import module ADC as administration if you want to see all of the
available.
Come on lads for received deployment and administration.
You can run the following command and Windows power shall get command.
This module a DC s asterisk the following list describes some of the common class for C administration.
You can use a DCA template command loud.
This adds a certificate template to the C and other command letters add c c to your distribution point.
This will add to their CTP uniform resource identifier or you are right where the C publishes certification
revocations and other command letters at C authority information access.
This configure is a or or CSP your arise on the C get C template.
This gets the list of templates set on the C for issuance of certificates gets a city or distribution
point will get all the locations set on SDP extension of the C properties get C authority information
access will get the FIA and or CSP your array information that is set on the ay a extension of the C
properties.
We have also removed C template remove C is it or distribution point and remove C authority information
access.
This will remove templates from C remove the your right and remove a or or all as O CSP your rights
for additional information you can refer to.
This links.
As for ADC as deployment.
Come on lets and Windows power shall and a DC US administration.
Come on let's say on Windows power shall.
Now let's have some words about using search you tool to administer SCA while Windows power shell does
not provide full ADC as management server to your till provides full management capability server to
tool that exceed the command line tool that installs as part of ADC s search you still can display C
configuration information and configure ADC as and backup and to restore C components and verifies certificates
key pair RSM certificate change for currency configuration and management tasks you do not have to use
search you till.
However for more advanced tasks searching tool might be your only choice.
For example if you want to review all configuration sets for the CIA you can do it by issuing the following
commands.
Sorry to steal this dump or search to till death Get Rich or a search tool does get rich.
CIA this comment provides much more information about your AC configuration.
This includes the type of information that is said by C policy dot Ian for after the installation by
running post configuration scripts.
You cannot access all the information by using this certification authority.
Council only now to view the contents of the a container in a d d s for a domain named a data dot com.
We can rather follow and command sir to tilt their view store and the following description we will
get the information from L. derp where CNN equals two public key services.
Sound equals to a service as Fiona calls to configuration DC equals to a datum and certification base.
Now some verse about management picky Iowa's group policy.
After your picture is in place you will need to turn to a group policy to automate distribution and
to set configuration options.
You can use group policy for the following areas that relate to ADC as you can use it for credential
Roman.
This will enable users to maintain their certificates with HDD sales across multiple computers.
This also removes the requirement to manage multiple client certificates and private keys across multiple
client workstations for a single user.
Another area is auto enrolment of certificates This simplifies the issuance of certificates by enabling
client computers to request and renew certificates automatically.
Auto enrolment requires an enterprise C and the use of group policy to enable the computer or some users
in Europe aided EA's environment for auto enrolment and other area is certificate pass validation with
certificate based validation you can manage certificates that are used for code sign in deployment subordinate
C certificates block and certificates that are not trusted and configuring retrieval Saturns for certificates
and CRL.
And the last area of work where you can use group policy that relate to ADC SS certificate distribution.
Typically you use group policy for the automated distribution of certificates or to specify a sentence
that relate to enrollment.
Next up you'll be talking about configuring CS security.
I'll see you there.