This document provides information regarding configuring our HSMs with the Microsoft Active Directory Certificate Services certificate authorities. These directions apply to Windows Server 2012 and later. For additional questions related to your HSM, see the relevant user guide.

Microsoft Active Directory Certificate Services (AD CS) provide management of certificates through a server that acts as a certificate authority (CA). With our support of an AD CS, a network-connected can manage certificate authorities in a scalable manner and enable secure storage, encryption, and signing through the CNG library.