Install-AdcsEnrollmentPolicyWebService

Windows Server 2012 R2 and Windows 8.1

Install-AdcsEnrollmentPolicyWebService

Performs the configuration of Certificate Enrollment Policy Web service.

구문

Parameter Set: DefaultParameterSet
Install-AdcsEnrollmentPolicyWebService [-AuthenticationType <AuthenticationType> ] [-Credential <PSCredential> ] [-Force] [-KeyBasedRenewal] [-SSLCertThumbprint <String> ] [ <CommonParameters>]




자세한 설명

The Install-AdcsEnrollmentPolicyWebService cmdlet performs the configuration of Certificate Enrollment Policy Web service. It is also used to create additional instances of the service within an existing installation. To remove the certification authority role service use the Uninstall-AdcsEnrollmentPolicyWebService cmdlet.

You can import the cmdlet by running the following commands from Windows PowerShell:
Import-Module ServerManager
Add-WindowsFeature Adcs-Enroll-Web-Pol

매개 변수

-AuthenticationType<AuthenticationType>

Defines the authentication type used by the Certificate Enrollment Policy Web Service: Certificate, Kerberos, or UserName.


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

true (ByPropertyName)

와일드카드 문자 허용 여부

false

-Credential<PSCredential>

Specifies the credentials for installing the Enrollment Policy Web Service. The Enrollment Policy Web Service must be installed on a server that is a member of an Active Directory Domain Services (AD DS) domain. You must use an account that is a member of Domain Admins group to install this service.


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

true (ByPropertyName)

와일드카드 문자 허용 여부

false

-Force

별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-KeyBasedRenewal

Configures the Certificate Enrollment Policy Web Service to operate in key-based renewal mode. Key-based renewal allows certificate clients to renew their certificates using the key of their existing certificate for authentication. When in key-based renewal mode, the service will only return certificate templates that are set for key based renewal.


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

true (ByPropertyName)

와일드카드 문자 허용 여부

false

-SSLCertThumbprint<String>

Specifies the thumbprint of the certificate used by Internet Information Service (IIS) to enable support for required Secure Sockets Layer (SSL).


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

true (ByPropertyName)

와일드카드 문자 허용 여부

false

<CommonParameters>

이 cmdlet은 일반 매개 변수 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer 및 -OutVariable을 지원합니다. 자세한 내용은 다음을 참조하세요. about_CommonParameters(http://go.microsoft.com/fwlink/p/?LinkID=113216).

입력

입력 유형은 cmdlet에 파이프할 수 있는 개체의 유형입니다.

  • enum, string, bool, PSCredential

출력

출력 유형은 cmdlet이 내보내는 개체의 유형입니다.

  • Microsoft.CertificateServices.Deployment.Commands.CEP.EnrollmentPolicyServiceResult

참고

  • Ensure you run Windows PowerShell as an administrator. You can use the -force switch to bypass the prompt for confirmation.

    To see parameters, run the following command: install-AdcsEnrollmentPolicyWebService -?

  • You can get the CA configuration, which is the computer name and CA name by running certutil without any parameters. You can see the certificate SSL certificate thumbprints assigned to the local computer by running the following commands:
    cd cert:\LocalMachine\My
    dir | format-list

예제

-------------------------- EXAMPLE 1 --------------------------

Description

-----------

This command installs the Certificate Enrollment Policy Web Service using Kerberos for authentication. Replace <sslCertThumbPrint> with the actual certificate thumbprint. For information on obtaining a certificate thumbprint using PowerShell, see Certificate Provider (http://go.microsoft.com/fwlink/?LinkId=225044).


C:\PS>Install-AdcsEnrollmentPolicyWebService -AuthenticationType Kerberos -SSLCertThumbprint <sslCertThumbPrint>

-------------------------- EXAMPLE 2 --------------------------

Description

-----------

This command installs the Certificate Enrollment Policy Web Service specifying that username and password is used for authentication. Replace <sslCertThumbPrint> with the actual certificate thumbprint.


C:\PS>Install-AdcsEnrollmentPolicyWebService -AuthenticationType Username -SSLCertThumbprint <sslCertThumbPrint>

-------------------------- EXAMPLE 3 --------------------------

Description

-----------

This command installs the Certificate Enrollment Policy Web Service specifying that username and password is used for authentication and configures the service for Key-Based Renewal of the certificate. Replace <sslCertThumbPrint> with the actual certificate thumbprint.


C:\PS>Install-AdcsEnrollmentPolicyWebService -AuthenticationType Username -SSLCertThumbprint <sslCertThumbPrint> -KeyBasedRenewal

관련 항목

커뮤니티 추가 항목

추가
표시: