????? ??? ????? ???? ???? ?????? Windows ????? ???????? ??? ????? ????

?????? ????????? ?????? ?????????
???? ???????: 889250 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

??? ????? ????? ???? ???? (CA)? ???? ?? ???????? ???? ?? ??????? ?? ??? ?????? ?????? ?? ???? ?????. ?? ???? ?????? ???????? ??????? ?????? ????? ????????? ??????? "?????? ??????? ??????? ?????" ????????? ????? ????? ?????? ?? ????? ??? ??? ??????? ??? ????????.

???? ??? ??????? ????? ????? ???????? ??????? ?????? ????? ?????? ?????? ???????? ???????? ????? ????? CA. ???????? ??? ???? ???? ??? ??????? ?????? ?? ??????? ???????? ???? ????? ????????? ???????? ??? ????? ?????? CA ?? ?????? ????? ??.

????? ???

???? ??? ??????? ???? ????? ????? ??????? ?????? ?????? ?????? Microsoft Windows ?????? ????? ???? ???????? ??? ??? ?? ???? ???? "Active Directory".

?????? 1: ????? ???? ???????? ?????? ???? ?? ??????? ?? ??? ?????? ?????? ???????

  1. ???? ??? ???????? ???????? ??????? ??? ?? ???? ??? ????????????????????.
  2. ????? ?????? ?????? ????? ??? ??? ?? ???? ??? ?????? ?????????????????? .
  3. ?? ????? ??????? ???? ??? ??? ???????? ???? ?? ??????? ??? ?? ???? CTRL + A ?????? ???? ????? ????????.
  4. ???? ????? ??????? ??? ???????? ???????? ???? ??? ????????? ????? ??? ????? ???????.
  5. ?? ???? ?????? ????? ????? ? ???? ?????? ???? ??????? ?????????? ????? ??? ?? ???? ??? ?????.

?????? 2: ????? ?????? ?????? ???? CRL

  1. ?? ?????? ???????? Console(MMC) ????? Microsoft ?????? ??????? ?? ?????? ?????? ??? ???? ????? ???????? ? ??? ?? ???? ??? ?????.
  2. ?? ?????? ?????? ?????? ???? CRL ???? ??????? ???? ??????? ??? ???? ??? ?????.
?????? ??? ?? ???? ????? ????? ???????? (CRL) ????? ???? ?? ??? ???? ???????? ???? ?? ???????.

?????? 3: ??? CRL ?????

  1. ?? ?????? ???????? MMC ?????? ??????? ???? ????? ??????? ??? ???????????? ??????? .
  2. ???? ??? ???? ????????? ?? ???? ??????.
  3. ?? ???? ?????? ??? CRL , ???? ???CRL ?????? ??? ?? ???? ??? ?????.

?????? 4: ??? ?? ????? ?????

???? ???????? ?? ???? ????? CA ????? ????????. ??? ?? ??????? ????? ????? ??? ?????? ?????????. ???? ??? ????? ?????? ?????? ???? ??????? ???????:
  1. ?? ?????? ???????? MMC ?????? ??????? ???? ??? ?????? ????? ?????????.
  2. ?? ????? ??????? ???? ??? ??? ??????? ???????? ??????? ???? CTRL + A ?????? ???? ???????? ???????.
  3. ???? ????? ?????? ??? ??????? ??????? ????? ??? ?????????? ???? ??? ??? ?????.

?????? 5: ????? ????? "????? ????????" ?? ??????

  1. ?????? "????? ????????"? ???? ??? ????? ?? ???? ??? ?????? ??? cmd? ?? ???? ??? ?????.
  2. ?? ???? ???????? ???? certutil-????? ???????? ?? ???? Enter.
  3. ?? ???? ???????? ????certutil-?????? ?? ???? Enter. ???? ??? ??? ????? ????? ???? ?????? ????? ???? ??????? (CSP) ?????? ???????? ???????? ?? ?? ????. ???? ??? ??? ??????? ???????? ???????? ??? ?????? ?????? ????? ??. ???? ??? ????? ??? ????? ??? ?? ???? ?? ?????? ??????:
    (1)Microsoft Base Cryptographic Provider v1.0:
      1a3b2f44-2540-408b-8867-51bd6b6ed413
      MS IIS DCOM ClientSYSTEMS-1-5-18
      MS IIS DCOM Server
      Windows2000 Enterprise Root CA
      MS IIS DCOM ClientAdministratorS-1-5-21-436374069-839522115-1060284298-500
    
      afd1bc0a-a93c-4a31-8056-c0b9ca632896
      Microsoft Internet Information Server
      NetMon
      MS IIS DCOM ClientAdministratorS-1-5-21-842925246-1715567821-839522115-500
    
    (5)Microsoft Enhanced Cryptographic Provider v1.0:
      1a3b2f44-2540-408b-8867-51bd6b6ed413
      MS IIS DCOM ClientSYSTEMS-1-5-18
      MS IIS DCOM Server
      Windows2000 Enterprise Root CA
      MS IIS DCOM ClientAdministratorS-1-5-21-436374069-839522115-1060284298-500
    
      afd1bc0a-a93c-4a31-8056-c0b9ca632896
      Microsoft Internet Information Server
      NetMon
      MS IIS DCOM ClientAdministratorS-1-5-21-842925246-1715567821-839522115-500
  4. ??? ??????? ????? ??????? ??????? ??????. ?????? ????? ?? ???? ???????? ???? ????? ??????? ??? ?? ???? Enter:
    certutil-?????? ??????????????????????
    ?????? ??? ??? ??? ?????? ?????? ????? ?? ????? ??? ??????? ?? ????? ??? quotationmarks.

    ?? ??? ??????? ???? ??? ?????? ?????? "CA ??? ??????? Windows2000". ?????? ??? ??????? ?? ??? ?????? ??? ???:
    certutil-?????? "??? ??????? Windows2000 ?????? ??????"
  5. ??? ????? ??????? ??? ???? ?????? ?? ??? ?? ?? ??? ??????? ????? ?????? ??????.
  6. ??? ??? ??????? ????? ?????? ??????? ????? ????? "????? ????????". ?????? ????? ???? ??? ??????? ????? ?????? Windows Server ???? ???? ???????.

    ???? ??????? Windows Server 2003
    1. ?? ?????? ?????? ???????? MMC ?????? ?????? ??? ??? ?? ???? ???????.
    2. ???? ??? ???????? ??? ???? ???????? ???? ??? ????? ?? ????? ???????.
    3. ???? ??? ?????/????? ?????? Windows.
    4. ?? ?????? ???????? ? ???? ??? ????? ???????? ????? ???????? ? ???? ??? ??????? ?? ???? ????????? ?? "????? ?????? Windows" ?????? ????? "????? ????????".
    Windows Server 2008 ?????????? ??????

    ??? ??? ?????? ????? ????? CA? ??????? ?? "????? ???????"? ?? ?? ???????? ?? ???? ?????? ??????? ?????? ??? ???????. ????? ?? ?????????? ???? ????? ??????? ???????? ??? ?????.

    ?????? ????? ???? ????? ???? ??????? ???????:
    1. ???? ??? ???????? ??? ????? ??????? ??? ?? ???? ??? "????? ??????".
    2. ??? ???? ???????? ???? ??? ????? ??????? ?????? "????? ????? ???????"? ??? ???? ??? ??????.
    3. ???? ?????? ????? ???? ???????? ????? ???????? Active Directory ??? ?? ???? ??? ??????.
    4. ?????? ????? ?????? ??????? ? ???? ????????? ??? ?? ???? ??? ?????.
    5. ?? ???? ????? ????? ??????? ?????? (IIS) ???????? ?????? ?????? ??? ?????? ????? ????? ???????? ???? ??? " ?????".
    6. ??? ???????? ?? "????? ????? ?????"? ????? ????? ??????. ???? ???? ????? ????? ???????.
    ??????? ????? ??? ????? ??? ??? ???? ??? "????? ???????? Active Directory" (AD CS) ??? ??????? ??????? ??? ???? ????. ?????? ????? ?????? ????? ?? ???????? ?????? ???? ??? ??????? CS? ???? ??????? ???????.

    ????????? ????? ?????? ???????? ??? ???????? ????????? ???? ??? ?????? ?????? ?????? ?????? ??? ???????. ??? ??? ?????? ????? ????? CA? ??????? ?? "????? ???????"? ?? ?? ???????? ?? ???? ?????? ??????? ?????? ??? ???????. ????? ?? ?????????? ???? ????? ??????? ???????? ??? ?????.
    1. ???? ??? ???????? ??? ????? ??????? ??? ?? ???? ??? "????? ??????".
    2. ??? ???? ???????? ???? ??? ????? ???????? Active Directory.
    3. ??? ????? ???????? ???? ??? ????? ????? ?????.
    4. ???? ?????? ????? ???? ???????? ' ?????? ?????? '? ??? ?? ???? ??? ??????.
    5. ?????? ????? ?????? ??????? ? ???? ????????? ??? ?? ???? ??? ?????.
    6. ??? ??? ??? ????? IIS ???????? ?????? ?????? ??? ?????? ????? ????? ???????? ???? ??? " ?????".
    7. ??? ???????? ?? "????? ????? ???????"? ??? ????? ????? ??????. ???? ???? ????? ????? ???????.
    ??? ?? ????? ????? ??? ????????? ??? ???? "?????? ??? ????????"? ??????? ?????? ?? "?????? ??????" ??? ?????? ??? ????? ????? ??? ??????? ???? ???? ???? ???. ??? ????? ????? ???? ????? ??? ??? ????????? ??????? ??? ??????:
    • ????? ???????? ?????? ??????
    • ???????? ?????? ??????? ??????????
    • ???????? ?????? ?????? ?? ?????? ??????
    • ???????? ?????? ?????????? ?? ?????? ???????? ??? ?? ????? ???? ????? ????? ????? ??????? CS
    • ????? ?????? ?????? ??????? ????? ?? ???? "??????? ??????? ????? ??????? ???"
    • ????? CA ???????? ???????? ?? ???? "??????? ??????? ???????"
    • CRL ?????? ??????????
    ???? ???????? ??? ???????? ??? ????????? ??? ?????? ?? ??? ????? ????? ?????? ?????? ?? "?????? ??????". ??? ???? ??????? ?? ????? ????? ?????? ????? ?????? ?????? ??? ??? ???? ????? ???? ???? ????? ??? ??????.

?????? 6: ????? ???????? CA ?? "Active Directory"

??? ????? "????? ????? Microsoft" ??? ???? ??? ?? ????? ??? ????? ?????? ?? ???????? ?? ????? ??????? ???????? ?? "Active Directory".

??? ???????? ??? ???:
  • ???? ??????????????????
    • ??????? ?? CN AIA? CN = ??????? ?????? ????????? CN = ????? CN = = ???????? DC =??????????????.
    • ????? ??? ????? ?????? ?????? ?????? ??????.
    • ???? ?????? ??? ??????? ?????? (AIA) ????????.
  • ???? ????????????????????
    • ??????? ?? CN =??? ??????? CN ???? ??????? ????????? CN = ???? ???????? ????????? CN = ????? CN = = ???????? DC =?????????? DC = com.
    • ????? ??? CRL ?????? ???? ?? ??? ?????? ??????.
    • ?????? ??????? ???? ????? CRL (CDP)
  • ???? ????????????????????
    • ??????? ?? CN ??????? ???????? CN = ??????? ?????? ????????? CN = ????? CN = = ???????? DC =?????????? DC = com.
    • ????? ??? ????? ?????? ?????? ?????? ??????.
  • ???? ??????????????????
    • ??????? ?? CN ????? ???????? CN = ??????? ?????? ????????? CN = ????? CN = = ???????? DC =?????????? DC = com.
    • ????? ?????? ??????? CA.
    • ????? ??? ??????? ??? ????? ???????? ???? ?? ????? ?????? ?????? ???????. ?????? ??? ?????? ?????? ??????? ???? ???? ????? ??? ?? ??? ?????? ??????.
??? ????? ????? ?????? ??????? ??? ????? ?????? ??????????????????. ??? ???? ????? ?????? ????? ????? ?????? ?????? ??? ???????. ??? ???????? ????????? ?????? ??? ???????? ???? ?? ??????? ?? ??? ?????? ?????? CA ???? ?? ???? ?????. ??? ????? ??? ???????? ?????? ??????? ?? "?????? 1: ????? ???? ???????? ?????? ???? ?? ??????? ?? ??? ??????? CA" ??????.

?????? ????????? ??????? ?????? ??????? ??????? ????? (PKI) ??????? ??? ???????? ??????? ?????? ??? ????? ???? ????? ????????? ?????? ???? ????? CRL ??????? ??? ??????? ?????? (AIA) ?? "Active Directory". ???? ????? ???? ?? ????? ???? ???????? ??????? ?????? ??? CRL ??? CRL ?? "Active Directory". ?? ???? ?????? ???????? ??????? ?????? ??????? PKI? ????? ????? ?????? ?? ?????? ??? ??? ??????? ??? ????????.

??? ?? ??? ?????? ?????? ??? ???? ????? CRL ????????? ??????? ?? ??? ?? "Active Directory"? ????? ????? ??? ????????. ?? ??? ?????? ??? ???????? ??? ??? ????? ?????? ???? ?? ???? ?? ???????? ??????? ???? ??????.

????? ???? ?????? "????? ???????" ?? "Active Directory"

?????? ?? ??? ????? ????? ??????? ?? "???? active Directory" ??? ??? ????? ???? ???????? CA ?? ?????? ?????? "Active Directory".

?????? ???? ???????? "????? ???????" ?? "Active Directory"? ???? ??????? ???????:
  1. ????? ?????????? ?????? ??????. ?????? ????? ???? ??????? ???????:
    1. ???? ??? ????? ?? ???? ??? ?????? ??? cmd??? ???? ??? ?? ???? ??? ?????.
    2. ??? certutil? ?? ???? ENTER.
    3. ??? ?????? ?? ???? ????? ???? ????? ??? ?????? ?????? ????? ??. ??? ?????????? ????? ??????? ?? ??? ???????.
  2. ???? ??? ???????? ???????? ???????? ???? ??? ?????????????? ?????? ????????.
  3. ?? ??????? ??? ? ???? ???????? ???? ???????.
  4. ????? ????????????? ?????????? ???????? ???? ??? ?????? AIA .
  5. ?? ????? ??????? ???? ????? ?????????????????????????? ?????? ?????? ?????? ????? ?? ????? ???????? ???? ??? ???.
  6. ?? ????? ?????? ?? ????? Active Directory ??????????? ?????? ????????? ???? ??? ????????? ??????.
  7. ?? ????? ??????? ??? ???? ????? ??? ?????? ??? ?? ????? "????? ????????". ???? ????? ??????? ??? ??????? ????? ??? ????? ???? ??? ??? ?????.
  8. ?? ????? ?????? ?? "????? Active Directory" ??????? ??????????? ???? ??? ?????? ??????? ???????.
  9. ?? ????? ??????? ???? ????? ?????????????????????????? ?????? ?????? ?????? ????? ?? ????? ???????? ???? ??? ???.
  10. ?? ????? ?????? ?? "????? Active Directory" ??????? ??????????? ???? ??? ?????? ????? ??????? .
  11. ?? ????? ??????? ???? ?? ??? ?? ????? ??????????????????????? ?????? ?????? ????? ?? ????? ????? "????? ????????". ?? ??? ??? ?????? ???? ?? ?????? ?????? ??? ??????? ???? ??????????? ??? ???.
  12. ??? ??? ????? ???? ???? ????????? ?? ??? ??? ???????? ?? "Active Directory" ??? ????? ??? ???????. ?????? ??? CA ???? ?? ??? ??? ???????? ?? "Active Directory"? ???? ??? ??????? ?????? ?? ??? ??? ??? ??? ?????? AD:
    1. ???? ????? ?????? ?? ??? ???????? ??? ?? ???? ENTER:
      ldifde-r "cn =??????????"-d" CN = ??????? ?????? ????????? CN = ????? CN ???????? DC = =?????????? DC = com "output.ldf-f
      ?? ??? ?????? ?????????? ???? ???? ????? ???? ??? ??????? ?? ?????? 1. ??? ???? ??????? ??? ???? ???? ??? "CA1 ????????"? ???? ?? ???:
      ldifde-r "cn = CA1 ????????"-d "cn = ??????? ?????? ????????? cn ?????? cn = = ???????? dc = ???????? dc = com" remainingCAobjects.ldf-f
    2. ???? ????? remainingCAobjects.ldf ?? "???????". ?????? ?? ????? "changetype: ?????" ?? "changetype: ???."?? ???? ?? ?? ??? ???? ?????? "Active Directory" ???? ????? ???? ???????.
    3. ?? ???? ???????? ???? ????? ?????? ??? ?? ???? ENTER ???? ???????? CA ???????? ?? "Active Directory":
      ldifde-i remainingCAobjects.ldf-f
  13. ??? ????? ???????? ??? ??? ??????? ?? ??? ?? ?? ??? ???? ??????? ???????. ??? ?????? 12 ?????? ?? ??? ??? ??? ??? ?????? AD.

    ??? ?? ??? ??? ????? ???????? ??? ??? ?? ??? ???? ??????? ???????. ??? ?? ??? ??????? ????? ?????? ???? ??????? ???????:
    1. ???? ?? ?? ???? ???????? ??? ??? ???? ???? ?????? "????? ????????" ??????????????????????.
    2. ?? ???? ???????? ???? ????? ??????? ??? ?? ???? ENTER:
      cd%windir%\system32
    3. ???? ????? ??????? ????? ??? ENTER:
      regsvr32/i:i/n/scertcli.dll
      ??? ??????? ????? ????? ????? ????????????? ?? "Active Directory".
    ???? ????? ????????? ???? ??????? ???????.
    1. ?? ????? ?????? ?? ?????? ???????? MMC "?????? ???? ??????? ????????"? ???? ??? "??????????????? ???????".
    2. ?? ????? ??????? ???? ??? ???? ??????? ???????? CTRL + A ?????? ???? ????? ???????. ???? ??? ??????? ??????? ????? ???????? ???? ??? ???.

?????? 7: ??? ???????? ???? ?? ????? ????? ?????????????????

??? ??? ???????? ?????? ??????? ??? ???? ??? ?????? CA ???? ?? ????? ????? ????????????????? . ?????? ??? ??????? ??????? ???? ???????? ?? ???? ???? ?????????????????:
certutil-??????????? "ldap:///CN = ?????????????????? CN = ??????? ???????
??????..., DC = ?????????? DC = com? ?????????????? ????????? ??? ?????? = ????????????????????"

certutil-??????????? "ldap:///CN = ?????????????????? CN = ??????? ???????
??????..., DC = ?????????? DC = com? ?????????????? ????????? ??? ?????? = ?????????????????? "
?????? ??? ?? ???? ?????? ????? ??????? ?????? ??? ??????.
??????? ??????? ???????????- ????? ????? ????? ???????? ??? ?????? ???????? ?? ??????? ??????. ????? ??? ?????? ???????. ????? ????? ?????? ?? ???? ???? ??????? ???? ????? ??? ???????. ??? ??? ?????? ?????? ??? ??? ??? ??????? ??? ????? ????? ???????? ???? ????? ????? ?????.

?????? ????? ?????? ?????? ???? LDAP ?????? ?????? ????????????????? ?? "Active Directory" ????? ??:
???? certutil-? | findstr "CN = NTAuth"

???? 8: ??? ????? ?????? ?????? ??????

??? ????? ????? "????? ????????"? ????? ?????? ?????? ?????? ???? ????? ??? ???? ?????? ?????? ?????? ??????? ??? ???? ???.

?????? ????? ?????? ?????? ??????? ??? ?????? %systemroot%\System32\Certlog.

?????? 9: ????? ????? ?????? ???????

??? ????? ????? ?????? ??????? ??? ????? ???????? ???? ?? ??????? ?????? ?????? ???????.

?????? ???????? ???? ?? ??????? ??? ????? ???? ???? Windows Server 2000? ?????? ?????? ???????? Dsstore.exe ?? Microsoft Windows 2000 Resource Kit.

?????? ???????? ???? ?? ??????? ??? ????? ???? ???? Windows Server 2000? ???? ??????? ???????:
  1. ???? ??? ????? ?? ???? ??? ?????? ??? cmd? ?? ???? ENTER.
  2. ?? ???? ???? ????? ????: dsstore-????? ?? ???? ???????? ?? ???? ENTER.
  3. ??? 3? ?? ???? ENTER. ???? ??? ??????? ???? ???????? ???????? ??? ???? ????? ???? ??????.

    ?????? ?????? ?????? ???????? Dsstore.exe ?????? ?? ??? ???????? ???? ???? ?????? ???? ?? ??????? ??? ???? ???? ????. ??? ????? ?????? ??? ?????? ?? ??? ?? ???? ?????? ??????? ?????? ???.
?????? ???????? ???? ?? ??????? ??? ????? ???? ???? Windows Server 2003? ???? ??????? ???????.

??? ?? ?????? ??? ??????? ??? ??? ?????? ???????? ???? ????? ??? ????? ???? ???? ??????? 1 ???????.
  1. ???? ??? ????? ?? ???? ??? ?????? ??? cmd? ?? ???? ENTER.
  2. ?? ???? ??????? ??? ???? ???? ????? ???? ?????????-?????? certutil.
????? Certutil.exe ?????? ?? ??? ???? ???????? ???? ???? ?????? ???? ?? ??????? ?????? ?????? ???????. ??? ????? ?????? ??? ?????? ?? ???.

???? ????? ??? ??????? ???? ??????? ???????:
  1. ???? ??? ????? ?? ???? ??? ?????? ??? cmd ?? ?????? ??? ? ??? ???? ??? ENTER.
  2. ?? ???? ???????? ???? ????? ??????? ?????? ???? ??????? ???????? ??? ?? ???? ENTER:
    • ? Windows Server 2000: secedit/refreshpolicy machine_policy/???
    • ????? ??????? Windows Server 2003: gpupdate/force

???????

???? ???????: 889250 - ????? ??? ??????: 20/?? ?????/1434 - ??????: 3.0
????? ???
  • Windows Server 2012 Standard
  • Windows Server 2012 Datacenter
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Datacenter
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Small Business Server 2003 Premium Edition
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
  • Windows Server 2012 R2 Datacenter
  • Windows Server 2012 R2 Standard
????? ??????: 
kbhowtomaster kbcertservices kbhowto kbmt KB889250 KbMtar
????? ????
???: ??? ????? ??? ??????? ???????? ????? ?????????? ??????? ?????? ??? ??????? ?? ??? ??????? ?? ??????? ??? ??? ?? ???? ????????? ???? ??????? ???????(CTF) ?? ?? ???? ????? ????. ???? ?? ???? ?????????? ??? ???????? ???????? ???? ??? ?? ???????? ??????? ?? ??? ??????? ???????? ?? ??? ??????? ??????? ??? ?????? ?? ?????? ??? ???? ???????? ???????? ?? ????? ??????? ????? ????? ??????. ??? ?? ???????? ???????? ?? ????? ??? ????? ?? ???????? ?? ???? ????? ?? ?????. ?????? ??? ???? ?????????? ???? ?????? ?? ??? ????? ?? ??? ??? ?? ??????? ?? ??? ????? ?? ???? ????? ????? ?? ????? ??????? ???? ?? ???????? ?? ??? ???????.
???? ??? ????? ??????? ?????? ??????????889250

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com