Active Directory Certificate Services (AD CS) is the Windows Server role that provides a public key infrastructure and certificate authority integrated with Active Directory.
Simple definition
Active Directory Certificate Services (AD CS) is the Windows Server role that provides a public key infrastructure and certificate authority integrated with Active Directory. It belongs to the Active Directory vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to issue and manage certificates for users, computers, servers, VPN, Wi-Fi, TLS, smart cards, or authentication. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
AD CS relies on one or more certification authorities, certificate templates, enrollment, and publication of revocation information.
Key points
- Scope: The Windows Server role that provides a public key infrastructure and certificate authority integrated with Active Directory.
- Operational goal: Issue and manage certificates for users, computers, servers, VPN, Wi-Fi, TLS, smart cards, or authentication.
- Implementation: AD CS relies on one or more certification authorities, certificate templates, enrollment, and publication of revocation information.
Points to watch
A compromised CA or overly permissive template can become a privilege-escalation path; protect keys and audit templates.
In short
Active Directory Certificate Services (AD CS) = the Windows Server role that provides a public key infrastructure and certificate authority integrated with Active Directory. Use it when you need to issue and manage certificates for users, computers, servers, VPN, Wi-Fi, TLS, smart cards, or authentication.