August 2019
Intermediate to advanced
786 pages
20h 22m
English
Content preview from Mastering Active Directory - Second Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
DSConfigDN
As I mentioned earlier, this is a standalone root CA, and is not part of the domain. However, CRL Distribution Points (CDP) and authority information access (AIA) locations, which are required by the CA, will be stored in DC. Since they use Distinguished Names (DN) with a domain, the root CA needs to be aware of the domain information to publish it properly. It will retrieve this information via a registry key:
certutil.exe –setreg ca\DSConfigDN CN=Configuration,DC=rebeladmin,DC=com