server: windows server 2008 r2 x64
work station: dell
you should install ad ds ,group policy.
how to use certificate ?
1 install ad dc
start -computer management - role - new role - ad dc(root ca)
2 set group policy
start - compter management - group policy-default domain policy - edit
set both computer and user 's windows set-security-certificate-certificate policy
set certifcate policy on ,and configure the path right .
3 application certificate
start-run-write mmc
click file-add/remove new items - certificate
right click person and set applicate new certification.
4 wait for passing ...
question: when one set group policy ,system will display one error the file "xxxx.pol" format is broken ,please reset the group policy by group policy edit. this error is used for the log only,but not for the configure.
5 how to set certificate automaticly?
a. set group policy automaticly.
b. set a certificate module automaticly.
c. put the certificate module into ca.
