???? ????? ???? ???? ????? ? Windows ?????? ????? ???????? ??? ????? ?? ?? ?? Windows Server 2003 ????? ??????? Windows 2000 Server

??? ????? ????? ???? ???? (CA)? ???? ?? ???? ???????? ???? ?? ??????? ?? ??? ?????? ?????? ?????. ?? ???? ?????? ???????? ??????? ?? ???? ????? ????????? ??????? "?????? ??????? ??????? ?????" ?????? ????? ????? ?????? ?? ?????? ??? ??? ??????? ??? ????????.

???? ??? ??????? ????? ????? ???????? ??????? ?????? ???? ?????? ???? ?????? ????? ????? ????? ???? ????. ???????? ??? ???? ???? ??? ??????? ?????? ?? ??????? ???????? ???? ????? ????????? ???????? ?? ????? ?????? ?????? ???????? ?? ?????? ????? ??.

???? ??? ??????? ???? ????? ??? ????? ????? ?????? ?????? ?????? Microsoft Windows? ?????? ????? ???????? ??? ????? ?? ?? ?? ???? ?????? active Directory.

?????? 1: ????? ???? ???????? ?????? ???? ?? ??????? ?? ??? ?????? ?????? ???????

1. ???? ??? ??? ?????? ??? ???????? ??????? ?? ???? ??? ????? ???????? ??????.
2. ?? ?????? ?????? ?????? ????? ??? ??? ?? ???? ??? ????? ?????? ????.
3. ?? ????? ??????? ???? ??? ???? ???????? ???? ?? ??????? ??? ?? ???? CTRL + A ?????? ???? ????? ????????.
4. ???? ????? ??????? ??? ???????? ???????? ???? ??? ???? ????? ??? ?? ???? ??? ????? ???????.
5. ?? ????? ???????? ???? ?????? ???? ?????? ????? ??????? ???? ?????? ??? ?? ???? ??? ?????.

???? 2: ????? ?????? ?????? ???? CRL

1. ?? ???? ???? ????? Microsoft ??? ?????? ?????? (MMC) ???????? ??? ?????? ?????? ???????? ???? ?? ??????? ????? ??? ?? ???? ??? ?????.
2. ?? ?????? ?????? ???? CRL ? ???? ???? ????? ??? ??? ????? ??? ???? ??? ?????.

?????? ??? ?? ???? ????? ?? ????? ????? ???????? (CRL) ???? ?? ??? ???? ???????? ???? ?? ?????.

???? 3: ??? CRL ?????

1. ?? ?????? ???????? MMC ?????? ??????? ?? ?????? ?????????????? ???? ?? ??????? ????.
2. ???? ??? ???? ??????? ?? ???? ??????.
3. ?? ??? CRL ???? ??????? ???? ???CRL ?????? ?? ???? ??? ?????.

?????? 4: ??? ?? ????? ?????

???? ???????? ?? ????? ?????? ?????? ?????? ????? ????????. ??? ???? ????? ????? ????? ??? ?????? ?????????. ???? ?? ????? ??? ?????? ???? ??????? ???????:

1. ?? ?????? ???????? MMC ?????? ??????? ???? ??? ???? ??????? ???????.
2. ?? ????? ??????? ???? ??? ??? ??????? ???????? ? ?? ???? CTRL + A ?????? ???? ???????? ???????.
3. ???? ????? ??????? ??? ??????? ???????? ???? ??? ???? ??????? ?? ???? ??? ??? ???.

???? 5: ????? ????? "????? ????????" ?? ??????

1. ?????? ????? "????? ????????"? ???? ??? ??? ?????, ???? ??? ?????? ??? cmd? ?? ???? ????????.
2. ?? ???? ???????? ???? certutil -????? ???????? ?? ???? ENTER.
3. ???? ???? ??????? ???????? ????????? ??????? ????certutil-????? ?? ???? ???????. ????? ??? ????? ??? ????? ???? ????? ????? ???? ??????? (CSP) ?????? ???????? ???????? ??? ????. ??? ????? ??????? ?????? ??? ??? ??? ?????? ?????? ????? ?? ??? ??? ????? ??? ?? ???? ?? ?????? ??????.

   (1)Microsoft Base Cryptographic Provider v1.0:
     1a3b2f44-2540-408b-8867-51bd6b6ed413
     MS IIS DCOM ClientSYSTEMS-1-5-18
     MS IIS DCOM Server
     Windows2000 Enterprise Root CA
     MS IIS DCOM ClientAdministratorS-1-5-21-436374069-839522115-1060284298-500
   
     afd1bc0a-a93c-4a31-8056-c0b9ca632896
     Microsoft Internet Information Server
     NetMon
     MS IIS DCOM ClientAdministratorS-1-5-21-842925246-1715567821-839522115-500
   
   (5)Microsoft Enhanced Cryptographic Provider v1.0:
     1a3b2f44-2540-408b-8867-51bd6b6ed413
     MS IIS DCOM ClientSYSTEMS-1-5-18
     MS IIS DCOM Server
     Windows2000 Enterprise Root CA
     MS IIS DCOM ClientAdministratorS-1-5-21-436374069-839522115-1060284298-500
   
     afd1bc0a-a93c-4a31-8056-c0b9ca632896
     Microsoft Internet Information Server
     NetMon
     MS IIS DCOM ClientAdministratorS-1-5-21-842925246-1715567821-839522115-500

4. ??? ??????? ????? ??????? ??????? ??????. ??? ?????? ????? ???? ?? ??? ?? ???? ???????:
   certutil-?????? ??????????????????????
   ?????? ??? ?????? ?????? ????? ?? ????? ??? ??????? ?? ????? ?? ???????? ??????.
   
   ?? ??? ????????????????????????????? ????? Windows2000 ?????? ?????? ?????. ?????? ??? ??????? ?? ??? ?????? ?? ?? ???:
   certutil-?????? Windows2000 ??????? "?????" ?????? ??????
5. ????? ??????? ???????? ??? ???? ?????? ?? ?? ??????? ????? ?????? ?????? ????? ?? ?? ?? ????.
6. ??? ??? ??????? ????? ?????? ?????? ????? ?? ?? ????? ????? ????? ????????. ?????? ????? ???? ??????? ???????:
   1. ????? ???????? MMC ?????? ?????? ??? ??? ?? ???? ???.
   2. ???? ??? ??? ?????? ??? ??? ???? ???? ????? ?? ???? ??? ????? ?? ????? ???????.
   3. ???? ??? ?????/????? Windows ??????.
   4. ?? ?????? ????? ???? ?????? ????? ????? ????? ???????? ??? ???? ????????? ?? ???? ??? ??????? ?? ???? ????????? ???????? ?? Windows ????? ?????? ?????? ????? ??????? ?????.

???? 6: ????? ???????? CA ?? "Active Directory"

????? ??? ????? ????? ????? Microsoft ??? ???? ???? ??? ?? ????? ??? ????? ?????? ?????? ?? ??????? ????? ?? "Active Directory".

??? ???????? ?? ???????:

• ???? ??????????????????
  • ??????? ?? CN = AIA? CN = ??????? ??????? ???????? CN = ????? CN = = Configuration, DC =??????????????.
  • ????? ??? ????? ?????? ?????? ?????? ??????.
  • ??? ???? ????????? ??????? (AIA) ????.
• ???? ????????????????????
  • ??????? ?? CN =??? ??????? CN = CDP? CN = ??????? ??????? ????? CN = ????? CN = = Configuration, DC =?????????DC = com.
  • ????? ??? CRL ?????? ?????? ?????? ??????.
  • ???? ????? CRL ???????? (CDP) ????
• ???? ????????????????????
  • ??????? ?? CN = ???????? CN = ??????? ??????? ???????? CN = ????? CN = = Configuration, DC =?????????DC = com.
  • ????? ??? ????? ?????? ?????? ?????? ??????.
• ???? ??????????????????
  • ??????? ?? CN = ????? ???????? CN = ??????? ??????? ???????? CN = ????? CN = = Configuration, DC =?????????DC = com.
  • ?? ?????? ?????? ?????? ?????? ???????.
  • ????? ??? ??????? ??? ????? ???????? ?? ????? ?????? ?????? ???????. ????? ?????? ?? ???????? ??? ??? ?????? ????? ????? ?? ??????? ?????? ?? ??? ?????? ??????.

??? ????? ????? ?????? ??????? ???? ?????????????????? ??? ??? ?????. ??? ???? ????? ?????? ????? ????? ?????? ?????? ??? ???????. ??? ???????? ????????? ?????? ??? ???????? ???? ???? ?? ??????? ?? ??? ?????? ?????? ?? ??????? ?? ???? ?????. ??? ?? ???? ??? ???????? ????? ?????? ??????? ?? "?????? 1: ????? ???? ?????? ???????? ???? ?? ??????? ?? ??? ?????? ?????? ??????? "??????.

?? ??? ????? ????????? ??????? ????? ?????? ??????? (PKI) ???????? ??????? ??? ????? ???????? ??????? ?????? ????????? ??? ????? ???? "??????? ??????" ?????? ??? ?????? (AIA) ?????? CRL ???? ???????? ?? Active Directory. ??? ???? ????? ???? ???????? ???????? ?????? ??? CRL ???? CRL ?? "Active Directory". ??? ???? ???????? ??????? ?????? ?????? ???? PKI ?????? ??? ???? ?????? ?? ?????? ???? ?? ??? ??????? ????????.

??? ?? ??? ?????? ?????? ??? ???? ????? CRL ? AIA ?? "Active Directory"? ????? ????? ??? ??????. ?? ??? ?????? ??? ???????? ??? ????? ?????? ???? ?? ???? ?? ???????? ??????? ???? ??????.

????? ???? ???????? ????? ?????? ?? "Active Directory"

?????? ?? ??? ????? ????? ??????? ?? "Active Directory" ??? ??? ????? ???? ???????? ?????? ?????? ?? ?????? ?????? Active Directory.

?????? ???? ???????? ????? ?????? ?? Active Directory? ???? ??????? ???????:

1. ????? ?????????? ?????? ??????. ?????? ????? ???? ??????? ???????:
   1. ???? ??? ??? ?????? ???? ??? ?????? ??? cmd ?? ??? ????? ??? ?? ???? ??? ?????.
   2. ??? certutil? ?? ???? ENTER.
   3. ??? ?????? ?? ??? ?????? ???? ????? ????? ?????? ?????? ????? ??. ??? ?????????? ?????? ??? ????? ?????? ?? ??? ???????.
2. ???? ??? ??? ?????? ??? ???????? ??????? ?? ???? ??? ???? active directory ????? ??????.
3. ??? ????? ????? ???????? ???? ???????? ???? ???????.
4. ?? ?????? ?????? ?? ?????? ??????? ??????? ?????? ?? ???? ??? AIA ????.
5. ?? ????? ??????? ???? ????? ??????? ??????????????????????? ?????? ?????? ????? ??? ???? ??????? ?? ???? ??? ???.
6. ?? ????? ?????? ?? ????? Active Directory ???????? MMC ????????? ???? ??? CDP ????.
7. ?? ????? ??????? ??? ???? ???? ????? ?????? ??? ?? ????? "????? ????????". ?? ?????? ?????? ??? ???????? ???? ??? ???? ?? ???? ??? ??? ?????.
8. ?? ????? ?????? ?? ????? Active Directory ???????? MMC ????????? ???? ??? ??????? ???????????.
9. ?? ????? ??????? ???? ????? ??????? ??????????????????????? ?????? ?????? ????? ??? ???? ??????? ?? ???? ??? ???.
10. ?? ????? ?????? ?? ????? Active Directory ???????? MMC ????????? ???? ??? ????? ????? ????.
11. ?? ????? ??????? ???? ?? ?????????????????? ?? ????? ?????? ? CA ????? ?? ????? ????? "????? ????????". ??? ??? ?? ??? ??? ??????? ???? ????? ??????? ??? ??????? ???? ??????? ?? ???? ??? ???.
12. ?? ???? ??? ????? ???? ???? ????????? ?? ???? ??? ???????? ?? Active Directory ??? ????? ??????? ???????. ????? ??? ?????? ???? ???? ?? ??? ???? ???????? ?? "Active Directory"? ???? ??????? ??????? ?????? ?? ??? ??? ??? ??? ?????? AD:
    1. ???? ????? ?????? ?? ???? ??????? ??? ?? ???? ENTER:
       ldifde-r "cn =??????????"-d" CN = ????? ??????? ???????? CN = ????? CN = ?????? DC =?????????? DC = com "output.ldf-f
       ?? ??? ?????? ?????????? ???? ??? ?????? ???? ??? ??????? ?? ?????? 1. ??? ???? ??????? ??? ???? ??? ?????? ?? "Contoso CA1"? ???? ?? ???:
       ldifde-r "cn = ???????? CA1"-d "cn ??????? ???????? ??????? cn = = ????? cn = ?????? dc = ???? ?????? dc = com" remainingCAobjects.ldf-f
    2. ???? ????? remainingCAobjects.ldf ?? "???????". ??????? ??????? "??????????: ?????" ?? "??????????: ???." ??? ???? ?? ?? ??? ???? ?????? "Active Directory" ???? ???? ??? ???????.
    3. ?? ???? ???????? ???? ????? ??????? ??? ?? ???? ENTER ???? ???????? ??????? CA ?? Active Directory:
       ldifde-i-f remainingCAobjects.ldf
13. ??? ????? ???????? ??? ??? ??????? ?? ??? ?? ?? ??? ???? ??????? ???????. ??? ?????? 12 ?????? ?? ??? ??? ??? ??? ?????? AD.
    
    ??? ??? ??? ??? ????? ???????? ??? ??? ?? ??? ???? ??????? ???????. ??? ?? ??? ??????? ???????? ?? ???? ?????? ???? ??????? ???????:
    1. ???? ?? ??? ????? ?????? ??? ???? ???? ?????? "????? ????????" ???????? ?????.
    2. ?? ???? ???????? ???? ????? ??????? ??? ?? ???? ENTER:
       ????? ??????? %windir%\system32
    3. ???? ????? ?????? ??? ?? ???? ENTER:
       regsvr32/i:i/n/s certcli.dll
       ????? ????? ??? ??????? ????? ??????? ?? "Active Directory".
       
    ???? ????? ????????? ???? ??? ???????.
    1. ?? ????? ?????? ?? "????? ????? ?????? ??????" MMC ????????? ???? ??? "????? ????????" ????.
    2. ?? ????? ??????? ???? ??? ???? ?????? ???? ??? ???? CTRL + A ?????? ???? ???????. ?? ?????? ?????? ??? ????? ?????? ???? ??????? ?? ???? ??? ???.

???? 7: ??? ???????? ???? ?? ????? ??? ???? ?????????????????

??? ??? ???????? ?????? ??????? ???? ??? ??? ?????? CA ???? ?? ????? ????????????????? ????. ?????? ??? ??????? ??????? ???? ???????? ??? ???? ?????????????????:????? -??????????? ??????? ????? ????? ????? ????? ???????? ??? ?????? ???????? ?? ??????? ??????. ????? ??? ?????? ???????. ????? ????? ?????? ?? ???? ???? ????? ??? ????? ?? ???????. ??? ??? ?????? ?????? ??? ??? ??? ??????? ??? ????? ????? ???????? ???? ????? ????? ?????.

?????? ????? ?????? ????? ?????? LDAP ????? ????????????????? ???? ?? "Active Directory" ????? ??:

???? 8: ??? ????? ?????? ?????? ??????

????? ??? ????? ????? "????? ????????"? ????? ?????? ?????? ?????? ????? ???? ??? ???? ?? ???? ?????? ?????? ?????? ??????? ??? ???? ???.

??? ????? ????? ?????? ?????? ??????? ???%systemroot%\System32\Certlog ????.

???? 9: ????? ????? ?????? ???????

??? ????? ????? ?????? ??????? ??? ????? ???????? ???? ?? ??????? ??? ????? ???? ??????.

?????? ???????? ???? ?? ??????? ??? ????? ???? ???? Windows Server 2000? ?????? ?????? ???????? Dsstore.exe ?? Microsoft Windows 2000 Resource Kit.

?????? ???????? ???? ?? ??????? ??? ????? ???? ???? Windows Server 2000? ???? ??????? ???????:

1. ???? ??? ??? ?????? ???? ??? ?????? ??? cmd? ?? ???? ENTER.
2. ?? ???? ???? ????? ???? dsstore-????? ?? ???? ???????? ?? ???? ??? ENTER.
3. ??? 3? ?? ???? ENTER. ???? ??? ??????? ???? ???????? ???????? ??? ???? ????? ???? ??????.
   
   ?????? ?????? ?????? ???????? Dsstore.exe ?????? ?? ??? ???????? ???? ???? ?????? ???? ?? ??????? ??? ???? ???? ????. ??? ????? ?????? ??? ?????? ?? ??? ?? ???? ?????? ??????? ?????? ???.

?????? ???????? ???? ?? ??????? ??? ????? ???? ???? Windows Server 2003? ???? ??? ???????.

??? ?? ?????? ??? ??????? ??? ??? ?????? ???????? ???? ????? ??? ????? ???? ???? ?????? 1 ???????.

1. ???? ??? ??? ?????? ???? ??? ?????? ??? cmd? ?? ???? ENTER.
2. ?? ???? ??????? ??? ???? ???? ????? ???? ?????????-?????? certutil.

????? Certutil.exe ?????? ?? ??? ???? ???????? ???? ???? ?????? ???? ?? ??????? ??? ????? ???? ??????. ??? ????? ?????? ??? ?????? ?? ???.

???? ????? ??? ?????? ???? ??????? ???????:

1. ???? ??? ??? ?????? ???? ??? ?????, ??? cmd ?? ??? ???? ??? ?? ???? ENTER.
2. ?? ???? ???????? ???? ????? ??????? ?????? ???????? ?? ???? ???????? ??? ?? ???? ENTER:
   • ? Windows Server 2000: secedit/refreshpolicy machine_policy/???
   • ????? ??????? Windows Server 2003: gpupdate/force