Term
| What are common ADCS maintenance tasks are there |
|
Definition
| Delegating authority over the CA role, configuring CA auditing,monitor CA services, manage certificates, publish templates/CRLS, backup and restore the CA |
|
|
Term
| What are some common tasks when managing certificates |
|
Definition
| Publish certificate templates, renew certificates, revoke certificates,publishing CRL's |
|
|
Term
| What tools can you use to maintain your AD CS infrastructure |
|
Definition
| Enterprise PKI snap-in(PKIView),certutil.exe,Certificate Authority snap-in, Server Manager |
|
|
Term
| Name some tasks that you can perform with Server Manager |
|
Definition
| Setup CA's,Online Responders,NDES(Network Device Enrollment Service),Web Enrollment |
|
|
Term
| What are some of the task that can be performed with certsrv.msc |
|
Definition
| With the Certificate Authority snap-in you can: start/stop the CA,revoke certificates, delegate administrative control,backup/restore the CA,renew certificates |
|
|
Term
|
Definition
| Enterprise PKI can give you the status of your PKI infrastructure, you can check on the current health status of multiple CA's,can check the validity/ accessibility of AIA info and CDP's |
|
|
Term
| What can you do with certutil.exe |
|
Definition
| Configure CS, backup/restore CA components, verify certificates,key pairs, certificate chains |
|
|
Term
| Name some events that can happen on a CA that can be audited |
|
Definition
| Backup/Restore of the CA,configuration change,managing/issuing certificates,revoking ceritficates/publishing CRL,store,restore archived keys, start stop ADCS |
|
|
Term
| How can you view and manage audit policy options |
|
Definition
| Through local or domain Group Policy via:Computer Configuration\Windows Settings\Security Settings\Local Policies |
|
|
Term
| What tools can you use to backup/restore ADCS |
|
Definition
| CA Admin Console,Certutil.exe,Windows Server Backup, Data Protection Manager |
|
|
