Toggle navigation
Certification Authority
(current)
Czech (Czech Republic)
čeština (Česká republika)
German (Germany)
Deutsch (Deutschland)
English (United States)
English (United States)
Spanish (Spain, International Sort)
Español (España, alfabetización internacional)
French (France)
français (France)
Hungarian (Hungary)
magyar (Magyarország)
Italian (Italy)
italiano (Italia)
Japanese (Japan)
日本語 (日本)
Korean (Korea)
한국어 (대한민국)
Dutch (Netherlands)
Nederlands (Nederland)
Polish (Poland)
polski (Polska)
Portuguese (Brazil)
Português (Brasil)
Portuguese (Portugal)
português (Portugal)
Russian (Russia)
русский (Россия)
Swedish (Sweden)
svenska (Sverige)
Turkish (Turkey)
Türkçe (Türkiye)
Chinese (Simplified, PRC)
中文(中华人民共和国)
Chinese (Traditional, Taiwan)
中文(台灣)
Managing Online Responders
Procedures are available to complete the following basic Online Responder management tasks:
Add the Online Responder Snap-in to a Console
Audit Online Responder Operations
Administer an Online Responder from Another Computer
Modify the Online Responder Web Proxy
Add OCSP Locations to Issued Certificates
Renew OCSP Response Signing Certificates with an Existing Key
Table Of Contents
Active Directory Certificate Services
Active Directory Certificate Services Overview
Public Key Infrastructures
Types of Certification Authorities
Enterprise Certification Authorities
Stand-Alone Certification Authorities
Certificate Enrollment Web Service Overview
Certificate Enrollment Policy Web Service Overview
Common Scenarios for Using Active Directory Certificate Services
Checklist: Configure CAs to Issue and Manage Certificates
Checklist: Protect Encrypted Data from Loss by Enabling Key Archival and Recovery
Checklist: Enhance Certificate Revocation Checking in Diverse Environments by Setting Up an Online Responder Array
Checklist: Authenticate Web Servers with Certificates Issued by a Windows-Based CA
Checklist: Enhance Wireless Network Security by Requiring Certificates for Authentication and Encryption
Checklist: Strengthen Identity Management by Issuing Certificates for Smart Cards
Setting Up Active Directory Certificate Services
Setting Up a Certification Authority
Install a Root Certification Authoriity
Certification Authority Naming
Cryptographic Options for CAs
Certificates Database
Install a Subordinate Certification Authority
Set Up a Certification Authority by Using a Hardware Security Module
Uninstall a Certification Authority
Set Up Certification Authority Web Enrollment Support
Configure the Network Device Enrollment Service
Setting Up Online Responder Services in a Network
Configure a CA to Support OCSP Responders
Set Up an Online Responder
Creating a Revocation Configuration
Revocation Configuration CA Certificates
Revocation Configuration Signing Certificates
Revocation Provider Properties
Revocation Provider Signing
Verify an Online Responder Installation
Setting Up Certificate Enrollment Web Services
Installing the Certificate Enrollment Web Service
Installing the Certificate Enrollment Policy Web Service
Configuring Server Certificates for Certificate Enrollment Web Services
Configuring Group Policy to Support the Certificate Enrollment Policy Web Service
Configuring Delegation Settings for the Certificate Enrollment Web Service Account
Configuring the Certificate Enrollment Web Service for Renewal Only Mode
Configuring Certificate Enrollment Web Services for Enrollment Across Forest Boundaries
Advanced Configuration Options for the Certificate Enrollment Web Services
Managing a Certification Authority
Install and Use the Certification Authority Snap-In
Infrequent Management Tasks
Securing Active Directory Certificate Services
Implement Role-Based Administration
Restrict Certificate Managers
Establish Restricted Enrollment Agents
Configure CA Event Auditing
Send E-mail When a Certification Event Occurs
Configuring Certificate Revocation
Specify CRL Distribution Points
Configure CRL and Delta CRL Overlap Periods
Schedule Publication of Certificate Revocation Lists
Managing Key Archival and Recovery
Identify a Key Recovery Agent
Enable Key Archival for a CA
Configure a Certificate Template for Key Archival
Recover a Lost Key
Managing Policy and Exit Modules
Configuring the Policy and Exit Modules
Select a Different Policy Module
Select a Different Exit Module
Protecting a CA from Data Loss
Back Up a Certification Authority
Restore a CA from a Backup Copy
Recurring Management Tasks
Managing Certificate Enrollment
Configure Certificate Autoenrollment
Set the Default Action Upon Receipt of a Certificate Request
Review Pending Certificate Requests
Publish Certificates to the File System
Manage Certificate Revocation
Use the Network Device Enrollment Service
Using Policy to Manage Active Directory Certificate Services
Enable Credential Roaming
Manage Certificate Path Validation
Use Policy to Distribute Certificates
Troubleshoot Active Directory Certificate Services
Active Directory Certificate Services Resources