What's the difference between a User Certificate and Computer Certificate in Active Directory Certificate Services?
-
30 Nisan 2012 Pazartesi 14:53
What's the difference between a User Certificate and Computer Certificate in Active Directory Certificate Services?
What's the purpose of each and can you have one without the other?
Thanks, Intreeg.
Tüm Yanıtlar
-
30 Nisan 2012 Pazartesi 15:34User Certificates are used by users for EFS,e-mail and client authentications whereas Computer certificates helps a computer to autenticate to the network.
More about certificate templates can be found :
http://technet.microsoft.com/en-us/library/cc730826(v=ws.10).aspx -
02 Mayıs 2012 Çarşamba 09:42Moderatör
Hi,
For user certificates, the Subject Alternative Name (SubjectAltName) extension, if used, contains the user principal name (UPN). By default, the User certificate template is configured with the UPN.
For computer certificates, the SubjectAltName extension, if used, contains the fully qualified domain name (FQDN) of the computer, which is also called the DNS name. By default, the Workstation Authentication certificate template is not configured with this value and must be reconfigured to meet this requirement.
For details:
Computer and User Certificate Requirements
http://technet.microsoft.com/en-us/library/dd197531(v=WS.10).aspx
In addition, I'd like to share some related article for your reference:
Certificates
http://technet.microsoft.com/en-us/library/cc700805.aspx
How Certificates Work
http://technet.microsoft.com/en-us/library/cc776447(v=WS.10).aspx
Hope this helps!
Best Regards
Elytis ChengElytis Cheng
TechNet Community Support
- Yanıt Olarak İşaretleyen Elytis ChengModerator 09 Mayıs 2012 Çarşamba 01:49