Could someone clarify something for me? I am trying to configure the autoenrollment of a certificate in Group policy and the process is not working. My question is this-If everything is configured correctly as a user configuration autoenrollment in Group Policy than the certificate should be downloaded to the users personal information store on their computer at the time of login correct?

This is opposed to it being downloaded at whatever time the certificate is first needed. We are setting up WIFI access using certificate authentication so I was wondering if maybe the certificate would not be downloaded until the first time the person needed the certificate at the time they want to use the WIFI.

I have reviewed the Group Policy settings over and over and they seem correct and the users rights on the certification template allows read,enroll and autoenroll but it just is not downloading the certificate.

I have been following this

http://social.technet.microsoft.com/wiki/contents/articles/3048.troubleshooting-certificate-autoenrollment-in-active-directory-certificate-services-ad-cs.aspx

and everything seems okay.

• Moved by Amy Wang_Microsoft contingent staff, Moderator 4 hours 44 minutes ago CA related from DS forum

On Sat, 29 Aug 2015 12:23:27 +0000, Mankney2 wrote:

This is opposed to it being downloaded at whatever time the certificate is first needed. We are setting up WIFI access using certificate authentication so I was wondering if maybe the certificate would not be downloaded until the first time the person needed the certificate at the time they want to use the WIFI.

You have a classic chicken and egg scenario here. If you require
certificate authentication for WiFi access, there is no way to get access
to WiFi without first having a certificate that can be used for auth. How
can a system magically get WiFi access without a certif