Editing Active Directory (section)

===Certificate Services===
Active Directory Certificate Services (AD CS) establishes an [[On-premises software|on-premises]] [[public key infrastructure]]. It can create, validate, revoke and perform other similar actions, [[public key certificate]]s for internal uses of an organization. These certificates can be used to encrypt files (when used with [[Encrypting File System]]), emails (per [[S/MIME]] standard), and network traffic (when used by [[virtual private network]]s, [[Transport Layer Security]] protocol or [[IPSec]] protocol).

AD CS predates Windows Server 2008, but its name was simply Certificate Services.<ref>{{cite book|last1=Zacker|first1=Craig|editor1-last=Harding|editor1-first=Kathy|editor2-last=Jean|editor2-first=Trenary|editor3-last=Linda|editor3-first=Zacker|title=Planning and Maintaining a Microsoft Windows server 2003 Network Infrastructure|date=2003|publisher=Microsoft Press|location=Redmond, WA|isbn=0-7356-1893-3|pages=[https://archive.org/details/mcsaselfpacedtra00micr/page/11 11–16<!--This is a single page's number!-->]|chapter=11: Creating and Managing Digital Certificates|chapter-url-access=registration|chapter-url=https://archive.org/details/mcsaselfpacedtra00micr/page/11}}</ref>

AD CS requires an AD DS infrastructure.<ref>{{cite web|title=Active Directory Certificate Services Overview|url=https://technet.microsoft.com/en-us/library/cc731564%28v=ws.10%29.aspx|website=[[Microsoft TechNet]]|publisher=[[Microsoft]]|access-date=24 November 2015}}</ref>