How-To: Issue Entra CBA Smart Cards with ADCS

Create SmartCards by connecting EZCMS to your existing Windows ADCS (Active Directory Certificate Services) and start get started with passwordless authentication

Overview

Having certificate based authentication requires you to have a Certificate Authority that will issue certificates for your smart cards. We recommend using a PKI as a service CA such as our EZCA tool to have a compliant, HSM backed CA without all the management overhead. However, for organizations that require on-premises PKI deployments, EZCMS can connect to your existing windows (ADCS).

Pre-requisites

To establish this connection you are going to need: your ADCS Certificate Authority running on a Windows Server and another windows server that will be used as a certificate agent. CA Agent connection to ADCS

Getting Started

  1. Setup IIS
  2. Create Certificate Templates In CA
  3. Setup EZCMS Agent

How-To: Setup IIS

We go over how to Install IIS and web deploy in a new windows server.

How-To: Create CA Templates For Entra CBA Smart Cards

How to create an ADCS Template for SmartCard creation and authentication using EZCMS the leader in passwordless bootstrapping.

How-To: Issue SmartCard Certificates With ECMS Agent

EZCMS connects to your Windows Certificate Authority using our passwordless agent. Use the following instructions to set it up.