[{"id":"ci_d6cd8c1f5eafa6cc6c9332072ea5dda912a108e1b6f2cede2c4fcab0da177aa6","title":"Version Information and PDF Download","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/version-information","children":[]},{"id":"ci_50cd0b13bb3c16390b807be53b55c8d6555237c8785a20ffd1cd150cfecff6d7","title":"Introduction","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/introduction","children":[{"id":"ci_0fa4bd6309bca62dbc827ec0cb6f285db706ce3278bfeff87bb338bc8daec3c6","title":"About This Guide","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/about-this-guide","children":[]},{"id":"ci_0c73708755649a69c2d3928cb456d186cb44a3f24022ae17143843300d1c28cc","title":"Target Audience","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/target-audience","children":[]},{"id":"ci_50c974d7059c4b2ac7ac34b6598125596e757ee72f775f2edc868b743625ee48","title":"Abbreviations","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/abbreviations","children":[]},{"id":"ci_717ef1e151d494feb236304595c67200845cb094531dc0276b6e957e6d1b4192","title":"Document Conventions","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/document-conventions","children":[]}]},{"id":"ci_b03bb3e722cbd359f3850bb51030e978e0cd4558ce137d8ae60f9ded562cf534","title":"Product Overview","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/product-overview","children":[{"id":"ci_a320278f5262d1d89ec82c7c1db72d8ba7e3e19903e819de2788920ea310488f","title":"Microsoft Active Directory Certificate Services","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/microsoft-active-directory-certificate-services","children":[]},{"id":"ci_9268c4d0ac2df87895511521b9ac11fcf55391c5fa3bacbde57a2d10b482786a","title":"Online Certificate Service Protocol","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/online-certificate-service-protocol","children":[]},{"id":"ci_8e6ec11eba695921ba488a4d4ccb4113091487d4e39581f2eb263bd5226b7c9d","title":"Utimaco u.trust GP HSM","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/utimaco-u-trust-anchor-hsm","children":[]}]},{"id":"ci_ba9ed6f3262e727cd1763c8330c02812baf978b3d79d39bbcd5ffa7e88490c83","title":"Integration Requirements and Prerequisites","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/integration-requirements-and-prerequisites","children":[{"id":"ci_4d65781d6d96670cdd2e911a18bc56bef3695f49f6bf88573660ca9de09dc10c","title":"Tested Versions","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/tested-versions","children":[]},{"id":"ci_72bf1ba427ce2caec682695d28d7141f16b57e3b58d395d7be79b9e13824ca95","title":"Hardware and Software Requirements","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/hardware-and-software-requirements","children":[]},{"id":"ci_15f386a4f0c8cfea07a0e1c5fad4bd1eda5fd97cbdd04f6df0308ce7d7b52261","title":"Prerequisites","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/prerequisites","children":[]}]},{"id":"ci_77adc735119a9ec2313a51a8f667b6adea1327f1b8a18b41b401dde9d5f0145b","title":"Installation and Configuration","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/installation-and-configuration","children":[{"id":"ci_e9fdc907c3f53e9c6475962d3fc452f695ff9ab4cefb184c1758cc8f4580cda8","title":"Setting Up u.trust GP HSM","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/setting-up-u-trust-anchor-hsm","children":[]},{"id":"ci_db6392acfca06944ba1d9e687f202b7ef879d18a01b93ab237bc34ea590e4d03","title":"Setting Up Microsoft AD CS","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/setting-up-microsoft-ad-cs","children":[{"id":"ci_9b5eced52b65f6aaef18f981f00842aba40c9aa6ea1337256ead274d0b8f548f","title":"Install Microsoft AD CS with Windows Enterprise","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/install-microsoft-ad-cs-with-windows-enterprise","children":[]},{"id":"ci_33349689430dc38b5ed9aa15bdba87aa8bf1779f65758f7ca8e31211a8639602","title":"Install Microsoft AD CS with Windows Server Core","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/install-microsoft-ad-cs-with-windows-server-core","children":[]}]}]},{"id":"ci_0b765c185de872802d63e41c83f38fc7ae03d8bdb45909270fb8326bbc90fc00","title":"Integration Steps","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/integration-steps","children":[{"id":"ci_ca83cd4973a86423fb0d53ce3e78cd61051506bc7a9b8fbbde138514fb1702a6","title":"Configuration on u.trust GP HSM","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configuration-on-u-trust-anchor","children":[{"id":"ci_f41d045d1b0c1305dff65357415d94c3b7ff0730ea409daeab0422ebb7bcc09d","title":"Configuring the CSP-CNG Provider","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configuring-the-csp-cng-provider","children":[{"id":"ci_8394adf89ee6f800e8bee947c521bbf00c7b91d71a041329baacbc4fca37ef9e","title":"Creating HSM Users","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/creating-hsm-users","children":[]},{"id":"ci_0d0e86726ba4e9237c711ebfa36b3843f48ef44c172a257984f9324cd783a0f9","title":"Setting up the CSP/CNG Provider","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/setting-up-the-csp-cng-provider","children":[]}]}]},{"id":"ci_9b76ce49dd9de3b55f6be5f5d3a4d8f141215a3d2fc5490ae678b0bebe3f034a","title":"Configuration on Microsoft AD CS","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configuration-on-microsoft-ad-cs","children":[{"id":"ci_caa391dde282a2bb2a7cade762e1cbbeac5ea5cd6fb9c6b3779682d0737fd8a8","title":"Configure the CA with Windows Enterprise","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configure-the-ca-with-windows-enterprise","children":[]},{"id":"ci_7d59641e1efa133ba4db926e3c504ac0ac2ad076dc36d162620a0c09abca0842","title":"Configure the CA with Windows Server Core","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configure-the-ca-with-windows-server-core","children":[]},{"id":"ci_97228af8074a1b301b6407bd125ad339385177380219b65e6c68e049fc91b5a8","title":"Testing the AD CS","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/testing-the-ad-cs","children":[]},{"id":"ci_e43dd0b8eaf916249617247f44955d74215fffb8f35a3028dd1330469f083008","title":"Configuring the Auto-Enrollment Group Policy for a Domain","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configuring-the-auto-enrollment-group-policy-for-a","children":[]}]}]},{"id":"ci_a1207ff47eace2d2b82d42b6eec6818185ecc373c2d1903bfc873251cab96018","title":"Verification and Testing","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/verification-and-testing","children":[{"id":"ci_ba2db808a5645d65f48712d2cb01929593548a9733564b50e3c00da493c778e0","title":"Functional Testing","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/functional-testing","children":[{"id":"ci_afdf183bff29afc82a4828e2c2324d4e23061ba828cffb6e47285c5f0ffe465a","title":"Configuring the Certificate Enrollment to Use CA Templates on the AD CS Server","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configuring-the-certificate-enrollment-to-use-ca-t","children":[]},{"id":"ci_a140191ed1fedfe06b06fa7519b7a443f93c5f196b7d3e95905fccfa4fccf572","title":"Private Key Archiving and Recovery","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/private-key-archiving-and-recovery","children":[{"id":"ci_bf8ea99a44026c0c23fc04034b6de9b53131d5c2d6b9ac963bb214cafa91d2a8","title":"Archive the CA Key","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/archive-the-ca-key","children":[{"id":"ci_ff672acdf1e4e7494e74e437caa7ad4fb18c197b4f4a5e8324bb6edd303ec0d6","title":"Archiving the CA Key","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/archiving-the-ca-key","children":[]},{"id":"ci_ada9f7653a417b25109a3e1e3efe63835921a3045d5105aa1657c0320ebc96a2","title":"Add a Key Recovery Agent (KRA) Template to CA","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/add-a-key-recovery-agent-kra-template-to-ca","children":[]},{"id":"ci_4b7bbd4a12258e97628df7d24e792c0138be11b93303ecdcaaa2ab13349e8284","title":"Issue the Key Recovery Agent Certificate","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/issue-the-key-recovery-agent-certificate","children":[]},{"id":"ci_9d3bdedd8c129f81c18e8c495299069c3c1bf9c78448bf97c1d530acb9ed8def","title":"Issue the KRA Certificate","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/issue-the-kra-certificate","children":[]},{"id":"ci_3b3015350eaafea233b2b6453c5fe4fedb54b79b678f77165bd3cfac1e8bbc2a","title":"Retrieve the Issued Certificate from CA","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/retrieve-the-issued-certificate-from-ca","children":[]},{"id":"ci_6fa96d386ce9382f453f3633d73e9dca53fe43a3370175219f481e03b08bcbe1","title":"Configure the CA to Support Key Archival","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configure-the-ca-to-support-key-archival","children":[]},{"id":"ci_630b5b1cebae7bfa83fc72457aed5972e1da88d807a050fdf1add439b4325b24","title":"Create a Template with Key Archival Enabled","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/create-a-template-with-key-archival-enabled","children":[]},{"id":"ci_d725bf6f500886143188b662d96dc81a24e6a3ca11e78cf441451dd543ae8a5e","title":"Add a New Template to CA for Issuing","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/add-a-new-template-to-ca-for-issuing","children":[]},{"id":"ci_fffff8009d7e65b0f9babfe9a7d7b5b9fdabc8815e914e9e23e4cf9e656a29ea","title":"Issue a User Template with Key Archival Enabled","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/issue-a-user-template-with-key-archival-enabled","children":[]}]},{"id":"ci_84613189d47dd90c5a98c803a1a02586adb1c9061f31666c0c1aa708b2a8a1ab","title":"Perform Key Recovery","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/perform-key-recovery","children":[]}]},{"id":"ci_4f27db6f3e332e5c8a2adae25f0519a9e5e8b060b4024e6dcb4f50797e73b0fe","title":"Migrating the Microsoft Software Key of AD CS to Utimaco HSM","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/migrating-the-microsoft-software-key-of-ad-cs-to-u","children":[{"id":"ci_9c44fd644a43c6028dc3fc7aa9359ffd819a13b2bcff9ffe3cbb3f4c8858b8bb","title":"Installing AD CS with Locally Stored Primary Key","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/installing-ad-cs-with-locally-stored-primary-key","children":[]},{"id":"ci_01f747dac3915fdffaca7e2d77e17ca3d9cb43c202fe395fc327377f303abda8","title":"Create a Backup of CA Database","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/create-a-backup-of-ca-database","children":[]},{"id":"ci_2368aeb0959de14a5c97cc87bc8dee98b30c3ab13d01181df42f983fbc333b21","title":"Importing Private Key to HSM","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/importing-private-key-to-hsm","children":[]},{"id":"ci_77fe824523bfe15c4faa06945218a41227e0f037ed93395a5d1850aab3cd2c2f","title":"Synchronizing HSMs","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/synchronizing-hsms","children":[]},{"id":"ci_2a44c022d658b10e6c3642c9195bdfb087232779825ad4c0ae91fb5284b6296c","title":"Reintroduce the Certificate","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/reintroduce-the-certificate","children":[]},{"id":"ci_fc446648c9e301d3fd9dc30f8494606e5315c2fdbcbaef2b599eae8256030469","title":"Configuring AD CS to Use Utimaco CryptoServer Key Storage Provider","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configuring-ad-cs-to-use-utimaco-cryptoserver-key-","children":[]}]},{"id":"ci_44cae0e40ec040d7e700461deaf1368d508583c9aefeb352f6c981b2ce8de117","title":"Installing and Configuring the AD CS Failover Cluster","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/installing-and-configuring-the-ad-cs-failover-clus","children":[{"id":"ci_f8e65ef5e04b115cf94e3752090df1ec6457080eafd1cbb5ea4f49d6b6bd0127","title":"Installing AD CS Server Role on First Cluster Node","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/installing-ad-cs-server-role-on-first-cluster-node","children":[]},{"id":"ci_c7facd159a6c4ff04ebc5bd0415e94c7725728f4bdf70f49e6f24d57f4e6c207","title":"Detach the Shared Storage from the First Cluster Node","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/detach-the-shared-storage-from-the-first-cluster-n","children":[]},{"id":"ci_c8fc141aeb48aa9fb8e0b1a3bf8f51c455b71fa7bd16e6987296cc6b1f363174","title":"Import MBK and Restore the Databases on Second Cluster Node","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/import-mbk-and-restore-the-databases-on-second-clu","children":[]},{"id":"ci_10e49da7d2d7a0ae57fd4b0fe0e0f91a8da09812003c290a4e4eaa04922b9805","title":"Installing AD CS Server Role on Second Cluster Node","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/installing-ad-cs-server-role-on-second-cluster-nod","children":[]},{"id":"ci_183a8ee7da0ef4a9c36212c45831ff56fc892d4757984377b36683bf620f3405","title":"Installing Failover Cluster Feature on Both the Cluster Nodes","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/installing-failover-cluster-feature-on-both-the-cl","children":[]},{"id":"ci_e1ae74d11ddc3ea5f0377c939165c515bcd67fec89cd2a6925e5410d9a0301b2","title":"Create a Failover Cluster","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/create-a-failover-cluster","children":[]},{"id":"ci_f12eda6c47602aa85bdb002a7095047c4303b36f56cdf971e8a67013b55adebf","title":"Configure Role for ADCS Failover","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/configure-role-for-adcs-failover","children":[]},{"id":"ci_86a9902da41a1a9a0a7ad1d431f74c39562df61c0be9065dcff17ab015e4fcf6","title":"Creating the CRL Objects in Active Directory","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/creating-the-crl-objects-in-active-directory","children":[]},{"id":"ci_aff0baa440375c08054c24b2e081e762ff8a36e42199b43c14a2144383310f43","title":"Updating the CA Configuration in Active Directory","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/updating-the-ca-configuration-in-active-directory","children":[]}]},{"id":"ci_f49c2ee0fb7492e2e71f08e0a22b956f4900f34b80b0b71251da66dd519a5008","title":"Online Certificate Status Protocol Service","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/online-certificate-status-protocol-service","children":[{"id":"ci_3818493e535cda78dfe1ade18578ab28a5a25affbe08504e54974e1e99dfded0","title":"Prepare Certificate Template for OCSP Signing","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/prepare-certificate-template-for-ocsp-signing","children":[]},{"id":"ci_a2b502a6eb1aad71c64eb872f9738cea960bc6c20b2afc4119a6b6d241501268","title":"CA Configuration","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/ca-configuration","children":[]},{"id":"ci_4dfd4a3f09495eff084083a558db997b3ebc38b34c919d311007976d1416563e","title":"Request a Certificate from OCSP Response Signing Template","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/request-a-certificate-from-ocsp-response-signing-t","children":[]},{"id":"ci_7def4bba99efc3b27eb92fffe2ccb11252b0f511a4b50846c0b106d2d8270ac7","title":"Install and Configure Online Responder","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/install-and-configure-online-responder","children":[]},{"id":"ci_275e08e580f60f5583b92647f56ca7d129a28f4e3ac005bd7b485993f3b4ddd7","title":"Make a Revocation Configuration","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/make-a-revocation-configuration","children":[]},{"id":"ci_1736755a7f4ff9fb8f5e900a8c3263ced9fd7cd74209b8fc9b9baee3a67b3b54","title":"Test the Online Responder","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/test-the-online-responder","children":[]}]}]}]},{"id":"ci_8a6df480bec5b702f30887db81b98746d4917b46ed7f0d46f6f7cee9e3996fb2","title":"Troubleshooting","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/troubleshooting","children":[{"id":"ci_5d53d6be87ba3a452905dd0d9a4edf46629ad36fbe861b79ad2b7118b2c4889e","title":"Common Issues and How to Resolve Them","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/common-issues-and-how-to-resolve-them","children":[]},{"id":"ci_25da12500352aaa08473cbd66a188dd6b27df874af4c7fa95ac750e3e2494b93","title":"Log Locations and Interpretation","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/log-locations-and-interpretation","children":[]}]},{"id":"ci_046edb33308f841302dd07b2e756a1c563f7c4ce1f811b27244bc5ae34b7f3f5","title":"Appendices","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/appendices","children":[{"id":"ci_ec1631b088338df86304668eb413266804fce74362be54d7efe2224a96f58290","title":"References","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/references","children":[]},{"id":"ci_0387025edc8a1b6165260ad8416563eff3aa3a29ddc21f967045d5f2b14e8fd3","title":"Command Summary","path":"/microsoft-active-directory-certificate-services-and-u-trust-gp-hsm/1.0.0/command-summary","children":[]}]}]