Process Certificate Requests

• Microsoft Certificate Services processes certificate requests in the following manner.
  • Request reception.
    • The certificate request is sent by the client application.
      • Typically by the Certificate Request Wizard in the Certificates snap-in.
    • If it is configured for key recovery, Microsoft Certificate Services server engine stores the private key in its certificate database.
  • Request approval.
    • Microsoft Certificate Services server engine calls the policy module.
    • It queries the request properties.
    • Determines whether the request is authorized or not.
      • If the request is denied it notifies the requestor.
    • Sets optional certificate properties.
  • Certificate formation.
    • If the request is approved, Microsoft Certificate Services server engine creates a digital certificate.
  • Certificate publication.
    • Microsoft Certificate Services server engine stores the newly created digital certificate in its certificate database.
    • It notifies the intermediary application of the request status.
    • Sends to the client application the newly created certificate from the certificate database.

What types of certifying authorities does Certificate Services offer?

---

---

© 2006 John Michael Pierobon

Notes