AFTER IT IS ISSUED, THE CERTIFICATE IS READY FOR USE AND IS KEPT IN...

4. After it is issued, the certificate is ready for use and is kept in the certificate store,which can reside in Active Directory. Applications that require a certificate usethis central repository when necessary.In practice, it isn’t terribly difficult to implement certificate services, as the followingexercise shows. Configuring the CA requires a bit more effort, as does planning the struc-ture and hierarchy of the PKI – especially if you are designing an enterprise-wide solution.We’ll cover these topics later in this chapter.

E XERCISE 12.01

I NSTALLING C ERTIFICATE S ERVICES