Mastering Active Directory - Second Edition

Publishing the root CA data to AD

In the preceding screenshot, we see that we have two files. One ends with .crt. This is the root CA certificate. In order to distribute it to other clients in the domain, it first needs to be published to AD. To do that, go ahead and copy this file from the root CA to the AD server. Then, log into the domain controller as Domain Admin or Enterprise Admin and run the following command:

certutil –f –dspublish "REBEL-CRTROOT_REBELAdmin Root CA.crt" RootCA

The next file ends with .crl. This is the root CA's CRL. This also needs to be published to AD, so that everyone in the domain is aware of it, too. In order to do that, copy the file from the root CA to the domain controller and run the following command: