Mastering Active Directory

Issuing a certificate for the issuing CA

In order to get AD CS running on the issuing CA, it needs the certificate issued from the parent CA, which is the root CA we just deployed. During the role configuration process, it automatically creates the certificate request under C:\, and exact filename will be listed in command output from the previous command:

The file needs to copy from the issuing CA to the root CA and execute the command:

certreq -submit "REBEL-CA1.rebeladmin.com_REBELAdmin IssuingCA.req"

As I explained before, any request to root CA will be processed manually, and this request will be waiting for a manual approval. In order ...