7.16. Enrollment Strategies

The next big hurdle—after you've designed your organization, you've picked the technologies you'd like to use, and you've determined when and where you are going to roll out your PKI—is deciding precisely how to do so. That is, you have to determine how you are going to issue certificates!

This process is referred to as an enrollment strategy. Using an enrollment strategy, you decide how users will receive certificates depending on the type of CAs you have deployed, the operating systems you're utilizing, and other various requirements. Most important, your enrollment strategy depends on the following:

The client operating system

This determines whether you can utilize autoenrollment. Modern Windows-based machines, ...

Get MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.