PKI，AD Connect和PTA [英] PKI, AD Connect & PTA

问题描述

大家好，

我们实际上正在使用完整的内部部署基础结构.事实是，用户正在使用PKI身份验证连接到其桌面.我们想继续使用AD Connect& amp;的混合解决方案PTA身份验证，但由于某些原因，我们被迫保留 PKI认证.我们可以做到吗?或AD Connect不接受PKI身份验证. ?

有没有办法解决这个问题?

rgds.

解决方案

请参阅相关文档. https://docs.microsoft.com/zh-cn/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-pki

另请参阅先决条件部分，专门将通过"作为推荐选项.

https://docs.microsoft.com/zh-cn/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs 解决方案

Active Directory user accounts are automatically configured for public key mapping by Azure AD Connect synchronizing the public key of the registered Windows Hello for Business credential to an attribute on the user's Active Directory object.

Please refer to the relevant document. https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-pki

Refer also to the prerequisites section, which specifically refers to Pass-Through as a recommended option.

https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs

这篇关于PKI，AD Connect和PTA的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！