Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My Following Setup:

Windows Server 2008 AD with CA

Redhat Workstation Joined to AD

I have used Openssl to generate a certificate request to be sent to the CA

openssl req -nodes -newkey rsa:2048 -keyout domain.key -out domain.csr

but how can I submit the request using command line for Red hat?, I'm aware of the window's version command which is

certreq -submit domain.csr

Is there a Linux Version of this? I'm trying out Auto-enrollment

I'm aware that I can use the Web Enrolment Page to submit my request, but I'm in a command line environment I don't have access to a browser. and Manually transferring the request with thumb drive is not an option either.

Please enlighten me on this matter. Thanks!!

yum install elinks is a good alternative, but is there another command line way? it should be useful for scripting to automate the task

winexe Great tool! Using this I understand the concept idea so by generating a certificate in a shared secure location between the Red Hat Machine and Windows Machine, and issuing the certreq commands remotely from the Red hat machine to the windows machine to generate the certificate. I'll test it out in my test environment again later.

but is there a standard industry practice out of the box solution? that anyone is aware of?

share|improve this question
    
yum install elinks. Now you have a Javascript-capable text only browser. –  Michael Hampton Sep 12 '13 at 3:37
    
Perhaps transfer the CSR to a server using some method. Then use winexe and powershell or your favorite tool from Windows CLI to submit the request and retrieve the results? –  Zoredache Sep 12 '13 at 7:23
add comment

1 Answer

up vote 0 down vote accepted

For non-domain devices, Network Device Enrollment Service is often the prefered solution, since it allows auto renewal once set up.

Please have a look at this Technet Wiki article: Network Device Enrollment Service (NDES) in Active Directory Certificate Services (AD CS) describing how to set up and use NDES

share|improve this answer
1  
I'll give this a try at my simulation lab :) Thanks for your input and everyone else here! –  Amos Sep 18 '13 at 2:54
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.