Part - 5.a : Create CAPolicy.inf for Enterprise CA & Publish the Root CA Certificate and CRL

preview_player
Показать описание

============================================================

1. Command to publish Offline Root CA Certificate and CRL in Active Directory.
certutil -f -dspublish "Root CA Certificate" RootCA
certutil -f -dspublish "Root CA CRL" CA01"

2. Command to add Offline Root CA Certificate and CRL in Enterprise Issuing CA local store
certutil -addstore -f root "Root CA Certificate"
certutil -addstore -f root "Root CA CRL"

===========================================================

Please let me know in comments if you have any query.

Please share this video with your friends & family. Also, Like the video and subscribe to the channel "Ashish WebCast".

Please check my other videos 🌟 🌟 🌟
1) Microsoft Interview Experience | Microsoft Support Engineer | Simply Explained
2) Unboxing ! My office laptop from Microsoft
3) Microsoft Sent me Gift ❤️ | Unboxing Goodies ⚡⚡⚡
4) Perks of working @Microsoft 🤩 | Benefits and Perks ❤️
5) Unboxing Goodies from @Microsoft ❤️📦 | New Employee Swags 2022 🔥
6) @Microsoft Bangalore Office Tour ❤️ | Office from Inside❤️
7) How to Negotiate Salary with HR | Tips from My Experience ❤️
8) The Resume That Got Me Into MICROSOFT 🔥 | How To Make Resume
9)Azure Certification Path 2022 | Which Azure Exam Should You Take
10) How to prepare for Microsoft Certified: Azure Fundamentals certification | AZ-900
11) Install a New Windows Server 2016 Active Directory Forest
12) How to Demote a Domain controller from Existing Domain | Windows Server 2016
13) How to Promote Read Only Domain controller (RODC) | Windows Server 2016
14) How to Create Group Managed Service Account | gMSA

============================================================
You can connect with me on

Рекомендации по теме
Комментарии
Автор

why do you have to add Root crl in issuing ca cert store ?? you dont have to add crl in issuing ca's

socialholic
Автор

Is possible, Create a root certificate authority for the topology, integrated with the domain and add
○ The CA attributes should be set as follows:
▪ The country code is set to BR.
▪ State is set to WS2024.
▪ Organization is set to ESCOLA
▪ The common name is set to "TecNew."

ProfTadeuPaes
Автор

hey! nice tutorial series and thanks a lot for it however when trying to publish the RootCA i get this error: "CertUtil: -dsPublish command FAILED: 0x8009030c (-2146893044 SEC_E_LOGON_DENIED)", any ideas?..

bnjmn