Mastering Active Directory

Publishing the root CA data into the Active Directory

In the preceding list, we have two files on of which ends with .crt. This is the root CA certificate. In order to be trusted by other clients in the domain, it needs to publish to the Active Directory. To do that, copy this file from the root CA to Active Directory server. Then, log into AD as the Domain Admin or Enterprise Admin and run the command:

certutil –f –dspublish "REBEL-CRTROOT_REBELAdmin Root CA.crt" RootCA

The next file ends with .crl. This is the root CA's CRL. This also needs to publish to AD. So, everyone in the domain is aware of that too. In order to do that, copy the file from root CA to domain controller and run the command:

certutil –f –dspublish "REBELAdmin Root ...