Client certificate enrollment from Windows CA

Question

Hi

I have heard it is possible to enroll client certificates from a Windows Active Directory CA onto Linux clients. Anybody can confirm this? I haven't found any indications for this in the documentation or on Google so far.

Thanks

Gerik

Answer 1

i would avoid this - windows ca is good - but not needed for ocs - it can hapen that you deploy windows ca and some windows users enrypt files on the fileserver without you knowledge bcause they can get a certificate by gpo.

You thing the private key is only for ocs-inventory and after some tests you might throw the key away.

Please create the key in the ocs-inventory server with genkey or openssl

kind regards