1
00:00:07,540 --> 00:00:15,400
And Windows Server 2016, you can use several methods to enroll for a user, a computer, a certificate

2
00:00:16,090 --> 00:00:19,990
which most of you choose depends on your specific scenario.

3
00:00:20,620 --> 00:00:28,180
For example, you can use auto enrolment to mass deploy certificates to many users, so computers.

4
00:00:29,660 --> 00:00:38,180
However, you might choose to use manual enrollment for certificates that are dedicated to a specific

5
00:00:38,180 --> 00:00:39,680
security principles.

6
00:00:40,970 --> 00:00:48,470
The following list describes the different and Romans methods and specifies when to use them.

7
00:00:50,150 --> 00:00:52,700
We have Auto-enrolment option.

8
00:00:53,520 --> 00:01:01,530
When you use this method, the administrator defines the permissions and the configuration of the certificate

9
00:01:01,530 --> 00:01:02,160
template.

10
00:01:03,580 --> 00:01:12,730
These definitions help the requester to request, retrieve and renew certificates automatically without

11
00:01:12,730 --> 00:01:19,910
end user interaction, administrators often use this method for shady deals, the main computer.

12
00:01:20,500 --> 00:01:25,840
You must configure the certificate for auto enrolment through group policy.

13
00:01:26,780 --> 00:01:30,770
We'll learn more about it a bit later.

14
00:01:32,370 --> 00:01:37,380
Another option is manual enrolment by using this method.

15
00:01:37,620 --> 00:01:46,350
The private key and a certificate request are generated on a device such as web service or a computer.

16
00:01:47,070 --> 00:01:55,440
The certificate request then is transported to the city to generate the requested certificate.

17
00:01:57,190 --> 00:02:05,050
The certificate learners transported back to the device for installation, use this method when the

18
00:02:05,050 --> 00:02:14,800
requester cannot communicate directly with the CIA or if the device does not support auto enrolment.

19
00:02:15,310 --> 00:02:19,890
This method is used when buying a public certificate.

20
00:02:20,350 --> 00:02:29,770
You can use this method through the certificate snapping or the third correct dot exit tool.

21
00:02:31,010 --> 00:02:33,950
Another option is CIA weapon, Roland.

22
00:02:34,310 --> 00:02:44,630
By using this method, you can ensure a website C so that users can obtain certificates to use CIA weapon

23
00:02:44,630 --> 00:02:45,230
enrollment.

24
00:02:45,560 --> 00:02:53,990
You must install internet information services and the CIA weapon Roman role of the CIA to obtain a

25
00:02:53,990 --> 00:02:54,830
certificate.

26
00:02:56,390 --> 00:03:05,690
The request or soon to the website, select the appropriate certificate template and then submits a

27
00:03:05,690 --> 00:03:06,410
request.

28
00:03:06,920 --> 00:03:14,960
The certificate issues automatically if the user had the appropriate permission to enrol for the certificate

29
00:03:15,790 --> 00:03:22,970
use of the secret weapon Rosemont method to ensure and to issue certificates.

30
00:03:23,240 --> 00:03:30,800
Then you cannot use auto enrolment, such as in the case of an advanced certificate to request.

31
00:03:32,310 --> 00:03:39,930
And the last month or two is auto enrolment on behalf to use this message.

32
00:03:40,050 --> 00:03:49,350
You must first create an enrollment agent and enrollment agent is a user account used to request certificates

33
00:03:49,830 --> 00:03:52,230
on behalf of another user account.

34
00:03:52,950 --> 00:04:03,630
A specific certificate template applies to an enrollment agent, which grants the necessary rights you

35
00:04:03,630 --> 00:04:04,950
were to use this method.

36
00:04:05,340 --> 00:04:15,570
For example, if you need to allow a manager to preload the logging certificates of new employees onto

37
00:04:15,580 --> 00:04:16,620
a smart card.

38
00:04:17,690 --> 00:04:23,900
Next hour, we'll be talking about an overview of Cert auto enrolment.