Adding an X.509 Certificate to a DC

[breadknife]

I am getting numerous errors on my top level DC stating it will not replicate as it does not have an x509 cerificate of Domain controller. Does anybody know how to add the cerificate to the DC? Thanks

 

[nfitzpatrick]

Howdy,

This may (or may not) help. If you have an existing certificate %certname%.cer, you can import it on the computer that needs it by either right clicking on it and selecting import or double clicking it (I can't remember which, though it's one of the two methods above). Also, take a look at

http://support.microsoft.com/default.aspx?scid=kb;en-us;313234

The MS KB article might be helpful.

Take care, good luck.

 

[GiaBetiu]

Certificates you can add to computer, or accounts. Via Run/mmc/Add remove snapin/Certificates.
But is not your case. You don't need this certificate.
Do you have defined sites? Subnets?
You need a PKI infrastructure when you are using SMTP intersite communication. Are you using this?

Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k