Chapter 7. Managing and administering a certification authority database with PowerShell
Since the introduction of Windows 2000 Server, the Windows operating system has provided a built-in component that allows companies to use public key infrastructure (PKI) features in their private networks—either Certificate Services or, starting with Windows Server 2008, Active Directory Certificate Services (AD CS).
Unlike with commercial certificate providers (like VeriSign/Symantec, DigiCert, and others), private AD CS allows unlimited certificate issuance at minimal cost. The high level of security provided by digital certificates, coupled with a low price and automatic certificate distribution (through automatic enrollment), has allowed ...