thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Systems & Data Center · Advanced

Active Directory Certificate Services (AD CS)

The Windows Server role that implements a public key infrastructure for issuing and managing digital certificates.

Definition

AD CS supports enterprise certification authorities integrated with AD, certificate templates, autoenrollment via Group Policy, and revocation through CRLs and OCSP. A typical design uses an offline root CA and online issuing CAs.

Example

Autoenrollment issues machine certificates for 802.1X to all domain computers.

Exam tip

Best practice is an offline standalone root CA with enterprise subordinate issuing CAs; misconfigured templates are a known attack path.

Related terms