Microsoft SharePoint 2010 Unleashed

Utilizing Active Directory Certificate Services for SharePoint Servers

Windows Server 2008 and 2008 R2 include a role that incorporates a PKI hierarchy. This role is known as Active Directory Certificate Services or AD CS. AD CS can be used to create and manage certificates; it is responsible for ensuring their validity. AD CS is often used to generate SSL Certificates for SharePoint virtual servers if there is no particular need to have a third-party verify an organization’s certificates. It is common practice to set up a standalone CA for network encryption that issues certificates only for internal parties. Third-party CAs such as VeriSign are also extensively used but require an investment in individual certificates.

Certificate services ...