ADCSremovedc

From WikiWiki
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Setup: standalone root, domainjoined subordinate CA

Target: remove the Domain Component (DC) from the subject in the subCA's certificate

Solution: while configuring the subCA ADCS role, the DC is automatically filled with the current domain information. So that becomes "CN=hostname,DC=domain,DC=location". To remove this, simply enter a space for DC info, so "CN=hostname,DC= , DC= ".

On a standalone machine you can simply keep it empty

1.png
2.png