adsys 802.1X certificate auto-enrolment from Active Directory CA

Asked by Jaimes Joschko

Hi Team,

I've looked at [wiki](https://github.com/ubuntu/adsys/wiki) and read the [FAQ](https://ubuntu.com/blog/new-active-directory-integration-features-in-ubuntu-22-04-faq). I believe pushing certificates through GPO is not currently supported but is being considered. Is this correct?

From my understanding certificate auto-enrolment from Active Directory CA use GPOs to do the certificate management for clients, so would the pushing of certificates through GPOs cover this use case?

Is there a known work around for using adsys (perhaps the scripting features) to manage 802.1X certificates for Ubuntu desktops?

Thanks!

---
Jaimes Joschko

Canonical Support
---

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu adsys Edit question
Assignee:
No assignee Edit question
Solved by:
Jean-Baptiste Lallement
Solved:
Last query:
Last reply:
Revision history for this message
Best Jean-Baptiste Lallement (jibel) said :
#1

Hi Jaimes,

Thanks for your interest in ADSys.

You're right. Certificates with AD CS are not implemented yet but is planned for 23.10.
For the moment, you could use scripts but it is not straightforward.

Thanks

Revision history for this message
Jaimes Joschko (jjoschko) said :
#2

Thanks Jean-Baptiste Lallement, that solved my question.

Revision history for this message
Jean-Baptiste Lallement (jibel) said :
#3

Certificates auto-enrolment landed in ADSys 0.13 in 23.10 https://launchpad.net/ubuntu/+source/adsys/0.13.0