This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.
Generate the issuing CA certificate
To generate the third party issuing the CA to the Group Policy object and the NTAuth store in AD:
-
Log into the Root Certification Authority server with an Administrator account.
-
Select Start > Run >, enter Cmd, and choose Enter.
-
To export the Root Certification Authority server to a new file name called ca_name.cer, enter:
certutil -ca.cert ca_name.cer
The following figure shows the certificate successfully installed into the NTAuth store.
Use certutil to install the issuing CA certificate into NTAuth store
