Hi,
I’ve also been experimenting with certificates for Windows machines and I’ve managed to install the UCS add-on from Cool-solutions as described in https://help.univention.com/t/cool-solution-creation-and-management-of-user-and-windows-certificates/ . I know that certificates are located in
/etc/univention/ssl/windows-hosts// and should also be available in AD/LDAP. I was then under the impression that the Windows machine automagically imported this certificate from it’s AD/LDAP entry in UCS when booted. Checking Certificate Store on Windows machine shows no such certificate. Checking AD/LDAP either through UCS GUI or Windows RSAT tool shows the relevant certificate info like DN etc but I can’t locate the certificate itself in some importable form.
Any relevant comments are most welcome.