Many organizations will use Group Policy to automatically enroll users, computers, or services for certificates. With automatic enrollment, a user might see a reminder with a prompt to complete the enrollment. However, there might also be times when a user or administrator wants to verify that all pending automatic enrollment requests are processed. The following procedure describes how to complete this task.
Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.
|
To autoenroll for a certificate by using the Certificates snap-in |
-
Open the Certificate snap-in for a user or computer.
-
In the console tree, click Certificates - Current User or Certificates (Local Computer).
-
On the Action menu, point to All Tasks, and then click Automatically Enroll Certificates.
-
Click Next. Select the certificates that you want to obtain, and then click Enroll. When the enrollment process is complete, click Finish.
Additional considerations
- User certificates can be managed by the user
or by an administrator. Certificates issued to a computer or
service can only be managed by an administrator or user who has
been given the appropriate permissions.
- To open the Certificates snap-in, see
Add the
Certificates Snap-in to an MMC.
Additional references