Scroll down to the ActiveX Controls and Plug-Ins section, and set both
Download Unsigned ActiveX Controls and Initialize and Script ActiveX
Controls Not Marked As Safe for Scripting to Enable (Figure 12-20). Without
this option enabled in Internet Explorer 7, your browser will not allow
certificates to complete the certificate enrollment process. Click OK to save the
changes. Click OK again to close the Internet Options window.
3. Go to http://win2k8ca/certsrv and enter your domain credentials when
prompted. Click Request a Certificate on the Welcome screen (Figure 12-21).
4. Select User Certificate on the Request a Certificate screen (Figure 12-22).
Note that you can also use the Web Enrollment Agent to request other
certificate types by clicking Advanced Certificate Request.
5. If you are logged in with domain credentials, no additional information is
needed since the server automatically obtains this data from AD. Click Submit
to complete the certificate enrollment process (Figure 12-23).
426 Microsoft Windows Server 2008 Administration
6. Finally, click Install This Certificate to install the newly created certificate to
your personal certificate store (Figure 12-24).
7. You will receive a successful installation message upon completion.
CERTIFICATE REVOCATION
Creating and issuing certificates is one of most important functions of a CA. Since certificates
are heavily integrated with authentication and encryption, it makes sense to have an
efficient and effective method for revoking a certificate when it should no longer be used.
Pages:
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457