none
Allocating 'Issue and manage certificates' privilege to NDES service account

    שאלה

  • The instructions in step 2 here  mention that we should allocate the 'Issue and manage certificates' privilege to NDES service account for each template that is used by NDES, allowing NDES to revoke certificates as devices fall out of scope of a SCEP policy.

    As far as I know it is only possible to allocate this privilege on a 'per CA' basis, and not individually for each template.  

    Could anyone confirm one way or the other?

    thanks.

    Mike

    יום רביעי 16 מאי 2018 14:19

תשובות

  • With the newer CAs (2008 R2 or higher) you can limit the permissions on the Restrict Certificate Managers tab so that the permissions are limited to the templates issued by NDES.

    Brian

    • הוצע כתשובה על-ידי Brian Komar [MVP] יום רביעי 16 מאי 2018 17:02
    • סומן כתשובה על-ידי Mike Elliott יום חמישי 17 מאי 2018 07:46
    יום רביעי 16 מאי 2018 17:02

כל התגובות