Active Administrator 8.7 - User Guide

Searching Certificate Authority

Searching Certificate Authority

The Active Administrator® Certificate Authority Search feature finds users and computers that have certificates issued by Active Directory® Certificate Authority and published into Active Directory. From the search results, you can view certificate details.

To search certificate authority

1	Select Certificate | Certificate Authority.

2	Select a forest from the list in the tool bar. If you do not see a forest, click Add forest. See Adding a forest.

3	Open the Search tab.

4	Select a search type.

 

Search type	Description
User	Search for users who have certificates issued by Active Directory Certificate Authority.
Computer	Search for computers that have certificates issued by Active Directory Certificate Authority.
Templates	Search the Template field of certificates issued by Active Directory Certificate Authority for both users and computers.
Issuer	Search the Issuer field of certificates issued by Active Directory Certificate Authority for both users and computers.
Key Usage	Search the Key Usage field of certificates issued by Active Directory Certificate Authority for both users and computers.
Objects without certificates	Search for all users or computers that do not have certificates issued by Active Directory Certificate Authority.

5	By default, the cache is searched. To search Active Directory, clear the Use search cache check box.

NOTE: The search cache is not available when the Objects without certificates search type is selected. To configure the search cache, see Configuring certification authority.

6	Select the domain to search. Searching All Domains is the default.

7	Select a filter from the list.

8	Depending on which search type you chose, browse to locate the user, computer, template, issuer, or key usage to search.

If you selected the Objects without certificates search type, select either users or computers to search.

9	Click Search.

The search results display the number of certificates found.

10	Double-click a result to view the certificates. Select a certificate, and click View Certificate to see details and to install the certificate.

Managing Certificate Authority servers

Managing Certificate Authority servers

You can view and manage each Certificate Authority server found in the selected forest. In this tab, you can stop, start, and restart the Active Directory Certificate service (certsvc), back up the selected server, and open the Microsoft Management Console (MMC) for the selected server.

To manage a Certificate Authority server

1	Select Certificate | Certificate Authority.

2	Select a forest from the list in the tool bar. If you do not see a forest, click Add forest. See Adding a forest.

3	Open the Servers tab.

▪	For each server, you can Start/Stop/Restart the Active Directory Certificate Service.

▪	To open the Microsoft Management Console (MMC) for a server, click Manage.

▪	To back up the selected server, click Backup. See Viewing Certificate Authority backups.

Viewing certificate templates

Viewing certificate templates

You can view all the certificate templates found in the selected forest.

To view certificate templates

1	Select Certificate | Certificate Authority.

2	Select a forest from the list in the tool bar. If you do not see a forest, click Add forest. See Adding a forest.

3	Open the Templates tab.

▪	To view details, double-click a template.

▪	To search for templates, start typing in the Search template names box. The list filters as you type.

▪	To sort the templates, click in a column header.

Viewing events

Viewing events

The Events tab displays events for a selected Certificate Authority (CA) server. Events are separated into processing events and all server events.

To view Certificate Authority events

1	Select Certificate | Certificate Authority.

2	Select a forest from the list in the tool bar. If you do not see a forest, click Add forest. See Adding a forest.

3	Open the Events tab.

4	Select a Certificate Authority server.

▪	The first scrollable list displays events related to Active Directory Certificate Services Request (Enrollment) Processing where the request was denied and other request processing issues.

▪	The second scrollable list displays all CA server events.

▪	To view details, double-click an event.

▪	The number of hours returned is set in the forest settings dialog. See Adding a forest.

▪	To sort the list, click a column header.