EAP-TLS with certificates

[johnnys]

Hi,

When a client requests a certificate from the Microsft CA server, its uses the normal http request.

Is there a way for the session to be encrypted

(https) when the client is requesting a certificate from the CA server.My concern is, by not encrypting the session someone can sniff the packet.

Any ideas ?

[Yossi.Mor]

Enable SSL on the IIS where certsrv is installed. From this point the connection will be ssl secured.

[johnnys]

Hi,

Thanks, I've enabled it and its working.

I have a another question?

At the moment anyone can requests certificates in the domain.

Is there a way to restrict certificates to only certain users.