Certificates auto enrollment in AD Bridge

You can manage the auto-enrollment of certificates using the config tool. The following commands can be used to manage certificates and auto-enrollment. For more information about a command, run the command with --detail.

✅

Example

/opt/pbis/bin/config –-detail EnableAutoEnroll

ℹ️

Note

For information about managing auto enrollment using group polices, see What are AD Bridge group policy settings?.

Authentication

Name of certificate or passphrase.

✅

Example

/opt/pbis/bin/config Authentication " "

AutoEnrollPollInterval

Sets the number of seconds that pass before the computer queries the CA service. The interval value is in seconds. Accepted interval values are between 300 and 65535 seconds. The default value is 28800 seconds (8 hours).

✅

Example

/opt/pbis/bin/config AutoEnrollPollInterval 300

CertificateTemplateNames

List of certificate template names to auto enroll.

✅

Example

/opt/pbis/bin/config CertificateTemplateNames

DeleteCertificatesWhenRemoved

Deletes enrolled certificates when the certificate is removed from the CertificateTemplateNames list. Accepted values are true and false.

✅

Example

/opt/pbis/bin/config DeleteCertificatesWhenRemoved

EnableAutoEnroll

Turns on the auto enroll service.

✅

Example

/opt/pbis/bin/config EnableAutoEnroll true

EnableWireless

Configures and enables the wireless interface. Accepted values are true and false.

✅

Example

/opt/pbis/bin/config EnableWireless false

EncryptPrivateKey

Certificate enrollment generates a private key file which by default is encrypted. Accepted values are true and false.

✅

Example

/opt/pbis/bin/config EncryptPrivateKey

ManagedCertificateLifecycle

Renews, updates, and removes certificates. Accepted values are true and false.

✅

Example

/opt/pbis/bin/config ManagedCertificateLifecycle false

SecurityType

The security method used for the wireless point.

0: None

1: WPA2-Enterprise

2: WPA2-Personal

✅

Example

/opt/pbis/bin/config SecurityType 1

SSID

SSID of wireless router.

✅

Example

root@tst-ubu1404-64:/home/testuser# /opt/pbis/bin/config SSID " "