Hi
We are looking at two options for PKI - Enterprise and Standalone. In either case, we'd be generating user certificates.
For the Enterprise CA, I've read that the User Certificates are stored with the user's AD Object. Is this true? Therefore the CA would need some form of write-permissions to Active Directory?
For the Standalone CA, I assume they are held in some sort of database local to the server.
If my thoughts about the former are correct. where in Active Directory are they stored. Is this something I can view?