Enabling the registration policy to use user and computer certificates

Before you can use certificates for authentication, you need to set the registration policy to enable automatic enrollment and renewal. The following procedure shows you how to set the Certificate Registration Policy for user and computer certificates in the Default Domain Policy. However, you can also set them on a group-by-group basis.

  1. Open the Group Policy Management plug in on the connector, right-click the Default Domain Policy, and click Edit.
  2. To enable the Certificate registration policy for computer certificates expand Computer Configuration > Policies > Windows Settings > Security Settings and click Public Key Policies.
  3. Double click Certificate Services Client - Certificate Registration Policy.
  4. In the Configuration Model menu, select Enabled.
  5. Click OK.
  6. To enable the Certificate registration policy for user certificates expand User Configuration > Policies > Windows Settings > Security Settings and click Public Key Policies.
  7. Double click Certificate Services Client - Certificate Registration Policy.
  8. In the Configuration Model menu, select Enabled.
  9. Click OK.