Auto-enrollment is working fine on Window 2008. PKI standalone root and Sub-Ent CA. But how can I enable Auto-enroll a user certificate to workstation, the subject of cert should be machine hostname. That's right I'm using a user cert, but want a machine hostname for the subject name, is that possible ? So far I have no luck. I have been playing around with options: E-mail name (User object DNS name (FQDN computer cert) User Principal name (user object) Service principal name (computer cert object?)

Hi, As far as I know, we cannot request a user certificate to workstation. Whats the purpose of this requirement? There are computer certificates that you can request for authentication. For your reference: Configuring the subject namehttp://technet.microsoft.com/en-us/library/cc783912(WS.10).aspx Thanks.This posting is provided "AS IS" with no warranties, and confers no rights.