High Availability – Does AD CS provide true high availability?
In Active Directory Certificate Services (AD CS), the Certification Authority database is implemented as a local CA-specific database. This limits the options for distributing or consolidating CA operations across multiple active instances. Traditional AD CS clustering does not provide active-active database replication for the CA database. As a result, high-availability architectures generally rely on failover […]
Windows Server & Certification Authority – Is it possible to operate multiple Certification Authorities with AD CS on a single server?
With Active Directory Certificate Services (AD CS), each logical Certification Authority generally requires its own Windows Server instance. Depending on the size and structure of the organization, it can be useful to separate Certification Authorities by purpose and scope. Many organizations also operate multiple Active Directory environments and CA hierarchies, which can result in a […]
Maintenance & Updates – How current is Microsoft PKI?
Active Directory Certificate Services (AD CS) has existed since the Windows NT 4.0 era, although under different names. The Active Directory-based architecture was introduced with Windows 2000 Server. AD CS is tightly integrated into the Windows ecosystem and continues to be widely used by companies and government organizations of all sizes. This long-standing integration and […]
AD CS Use Cases – How well does Microsoft PKI support modern requirements?
Microsoft CA (AD CS) can manage certain certificate processes, but its capabilities for managing the complete certificate lifecycle are limited. Companies that require comprehensive Certificate Lifecycle Management may therefore need additional solutions such as MTG CLM. A modern CLM provides benefits such as: With a modern CLM, companies can manage certificate lifecycles more efficiently while […]
Certificate Lifecycle Management – Does Microsoft AD Certificate Services (AD CS) provide its own CLM?
Microsoft CA (AD CS) can manage certain certificate processes, but its broader lifecycle management capabilities are limited. Companies that require comprehensive Certificate Lifecycle Management should consider additional solutions such as MTG CLM. A modern CLM provides several benefits, including: A modern CLM therefore helps companies manage certificate lifecycles more efficiently while improving the security and […]
Migration – Can my Microsoft PKI be replaced with MTG Corporate PKI & CLM?
Yes, an existing Microsoft PKI based on AD CS can be replaced with MTG Corporate PKI & CLM. The CLM Autoenrollment Connector enables MTG PKI to be integrated into an existing Microsoft Active Directory environment. This allows established Windows autoenrollment processes for requesting, renewing, and deploying certificates to continue to be used. At the same […]
Certificate Lifecycle Manager – Can Microsoft PKI be easily integrated with CLM?
Yes, Microsoft CA (AD CS) can be integrated with MTG CLM. This allows you to continue using your existing Microsoft CA while extending its use to cross-platform, non-Windows-specific use cases, such as issuing Linux server certificates via ACME. For companies that already operate a Microsoft PKI, there are two practical options: Professional Package: Your Microsoft […]
AD CS – Does my free Microsoft PKI include all the functions I need?
If you are looking for a modern PKI, you should definitely consider alternatives to Microsoft PKI (AD CS) as well. Based on our experience, there are two main reasons why companies move from the free Microsoft PKI to a more advanced solution: Optimized Certificate Lifecycle Management: Modern PKI systems provide advanced and automated functions for […]
Autoenrollment – Can MTG Corporate PKI be integrated with Microsoft Active Directory?
Yes, the MTG Autoenrollment Connector can integrate MTG Corporate PKI into an existing Microsoft Active Directory environment. This allows Microsoft AD CS to be replaced as the issuing PKI by MTG CARA while established Windows autoenrollment mechanisms continue to be used. The integration requires configuration of items such as certificate templates, Enrollment Policies, Group Policies, […]
Automation – Which certificate processes can be automated with MTG Corporate PKI & CLM?
MTG Corporate PKI & CLM can automate numerous certificate processes—from request and issuance through deployment and renewal—provided that the certificates originate from connected CAs. This currently includes MTG, Microsoft, GlobalSign, and Deutsche Telekom CAs. A particular advantage for users of Microsoft CAs is that certificate processes outside traditional Microsoft environments can also be automated. Examples […]