June 2017
Beginner to intermediate
742 pages
18h 29m
English
Content preview from Mastering Active Directory
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
DSConfigDN
As I mentioned earlier, this is a stand-alone root CA, and it is not part of the domain. However, CRL Distribution Points (CDP) and authority information access (AIA) locations, which are required by the CA, will be stored in DC. Since they use DN names with a domain, the root CA needs to be aware of the domain information to publish it properly. It will retrieve this information via a registry key:
certutil.exe –setreg ca\DSConfigDN CN=Configuration,DC=rebeladmin,DC=com