Skip to content

AD CS

Info

This note is still in development.

Overview


Active Directory Certificate Services (AD CS) is a Windows Server role (similar to IIS, DHCP, DNS, etc.) that is used for issuing and managing Public Key Infrastructure (PKI) certificates within a domain. This is utilized for secure communication and authentication protocols.

Features that AD CS provides includes:

  • Root and subordinate Certificate Authorities (CA's).
  • Certificate enrollment policy management and enrollment.
  • TPM (Trusted Platform Module) key attestation.
  • etc., etc., etc.

Because of AD CS' scale and utilization in authentication, we can...

Example