What’s New with Certificate Services in Windows Server 2008?

Active Directory Certificate Services (AD CS) in Windows Server 2008 is included as a server role that enables you to perform all certificate management activities without the need for add-on software programs. Included with AD CS are the following role services:

• Certification Authority— Enables you to perform all types of certificate management, including the creation, configuration, and revocation of digital certificates for computers, users, and organizations. You can link multiple CAs to form a PKI.

• Certification Authority Web Enrollment— Enables you to configure web-based certificate enrollment, including autoenrollment. You can also perform smart card enrollment and create enrollment agents that clients can use to request certificates.

• Online Certificate Status Protocol (OCSP)— Enables clients to use OCSP as a means of determining certificate revocation status.

• Microsoft Simple Certificate Enrollment Protocol— Allows routers and other network devices to obtain certificates.