Automatic certificate request policy

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Automatic certificate request policy

To create an automatic certificate request, you need the following information:

  • The certificate type that you want computers that are associated with the Group Policy object (GPO) to automatically enroll for. Computers can automatically request only certificate types that have a purpose associated with computers, not with users. Examples of computer-related certificates include:

    • Computer certificates

    • Internet Protocol security (IPSec) certificates

    • Web Server certificates

  • The certification authority (CA) that can issue the certificate.

    You can select from a predefined list of CAs. The CA that you select must be capable of issuing a certificate of the type and purpose that you have specified.

For more information, see Automatic certificate request settings, Create an automatic certificate request for computers in a Group Policy object, and Delete an automatic certificate request for computers in a Group Policy object.