Mastering Active Directory - Second Edition

Identifying the correct object types

Certificates can be issued to users, computers, services, or network devices. User certificates are mainly used for the authentication process. Certificates can also be used with an application or service. User certificates will be installed in a user certificate store. Computer certificates allow you to uniquely identify a device. Computer certificates will be stored in a computer certificate store. Network devices are allowed to use X.509 certificates, and they can be used to certify a device and encrypt the traffic passing through it. Services such as web and email can use certificates to authenticate or encrypt data. A service itself will not have a certificate, but it will use a computer certificate ...