And Windows Server 2016, you can use several methods to enroll for a user, a computer, a certificate
which most of you choose depends on your specific scenario.
For example, you can use auto enrolment to mass deploy certificates to many users, so computers.
However, you might choose to use manual enrollment for certificates that are dedicated to a specific
security principles.
The following list describes the different and Romans methods and specifies when to use them.
We have Auto-enrolment option.
When you use this method, the administrator defines the permissions and the configuration of the certificate
template.
These definitions help the requester to request, retrieve and renew certificates automatically without
end user interaction, administrators often use this method for shady deals, the main computer.
You must configure the certificate for auto enrolment through group policy.
We'll learn more about it a bit later.
Another option is manual enrolment by using this method.
The private key and a certificate request are generated on a device such as web service or a computer.
The certificate request then is transported to the city to generate the requested certificate.
The certificate learners transported back to the device for installation, use this method when the
requester cannot communicate directly with the CIA or if the device does not support auto enrolment.
This method is used when buying a public certificate.
You can use this method through the certificate snapping or the third correct dot exit tool.
Another option is CIA weapon, Roland.
By using this method, you can ensure a website C so that users can obtain certificates to use CIA weapon
enrollment.
You must install internet information services and the CIA weapon Roman role of the CIA to obtain a
certificate.
The request or soon to the website, select the appropriate certificate template and then submits a
request.
The certificate issues automatically if the user had the appropriate permission to enrol for the certificate
use of the secret weapon Rosemont method to ensure and to issue certificates.
Then you cannot use auto enrolment, such as in the case of an advanced certificate to request.
And the last month or two is auto enrolment on behalf to use this message.
You must first create an enrollment agent and enrollment agent is a user account used to request certificates
on behalf of another user account.
A specific certificate template applies to an enrollment agent, which grants the necessary rights you
were to use this method.
For example, if you need to allow a manager to preload the logging certificates of new employees onto
a smart card.
Next hour, we'll be talking about an overview of Cert auto enrolment.