Certificate Enrollment Policy Web Service
E726429
Certificate Enrollment Policy Web Service is a Windows server role service that provides policy information over HTTPS to clients requesting digital certificates in an Active Directory Certificate Services environment.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Certificate Enrollment Policy Web Service canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T8288922 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Certificate Enrollment Policy Web Service Context triple: [Active Directory Certificate Services, component, Certificate Enrollment Policy Web Service]
-
A.
Certificate Enrollment Web Service
Certificate Enrollment Web Service is a Windows server role service that enables certificate enrollment and renewal over HTTPS, typically used with Active Directory Certificate Services to support remote and policy-based certificate requests.
-
B.
Active Directory Certificate Services
Active Directory Certificate Services is a Windows Server role that provides public key infrastructure (PKI) functionality for issuing, managing, and validating digital certificates within an organization’s network.
-
C.
PKI
PKI is the abbreviation for Partai Komunis Indonesia, the former communist party of Indonesia that played a major role in the country’s mid-20th-century political history.
-
D.
Network Device Enrollment Service
Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
-
E.
Windows Certificate Store
Windows Certificate Store is a built-in Windows subsystem that securely stores and manages digital certificates and their associated private keys for use by applications and services.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Certificate Enrollment Policy Web Service Target entity description: Certificate Enrollment Policy Web Service is a Windows server role service that provides policy information over HTTPS to clients requesting digital certificates in an Active Directory Certificate Services environment.
-
A.
Certificate Enrollment Web Service
Certificate Enrollment Web Service is a Windows server role service that enables certificate enrollment and renewal over HTTPS, typically used with Active Directory Certificate Services to support remote and policy-based certificate requests.
-
B.
Active Directory Certificate Services
Active Directory Certificate Services is a Windows Server role that provides public key infrastructure (PKI) functionality for issuing, managing, and validating digital certificates within an organization’s network.
-
C.
PKI
PKI is the abbreviation for Partai Komunis Indonesia, the former communist party of Indonesia that played a major role in the country’s mid-20th-century political history.
-
D.
Network Device Enrollment Service
Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
-
E.
Windows Certificate Store
Windows Certificate Store is a built-in Windows subsystem that securely stores and manages digital certificates and their associated private keys for use by applications and services.
- F. None of above. chosen
Statements (45)
| Predicate | Object |
|---|---|
| instanceOf |
Active Directory Certificate Services component
ⓘ
Windows Server role service ⓘ |
| authenticationMethods |
Kerberos authentication
ⓘ
client certificate authentication ⓘ username and password authentication ⓘ |
| category | security infrastructure component ⓘ |
| communicatesWith | Certificate Enrollment Web Service NERFINISHED ⓘ |
| configuredUsing |
Certificates snap-in
ⓘ
Server Manager NERFINISHED ⓘ |
| configuredWith | service connection point in Active Directory ⓘ |
| dependsOn | Active Directory Domain Services NERFINISHED ⓘ |
| documentation | Microsoft Docs for AD CS enrollment web services NERFINISHED ⓘ |
| exposes | certificate enrollment policy over web services ⓘ |
| exposesEndpoint | policy service URL for certificate enrollment clients ⓘ |
| introducedIn | Windows Server 2008 R2 NERFINISHED ⓘ |
| partOf | AD CS enrollment web services NERFINISHED ⓘ |
| protocol | HTTPS ⓘ |
| providedBy | Active Directory Certificate Services NERFINISHED ⓘ |
| provides |
certificate issuance requirements
ⓘ
certificate template information ⓘ policy constraints for certificate requests ⓘ |
| purpose |
provide certificate enrollment policy information to clients
ⓘ
support certificate enrollment in AD CS environments ⓘ |
| requires |
Active Directory Certificate Services certification authority
NERFINISHED
ⓘ
IIS NERFINISHED ⓘ SSL certificate ⓘ service account ⓘ |
| roleServiceOf | Active Directory Certificate Services role NERFINISHED ⓘ |
| runsOn | Windows Server NERFINISHED ⓘ |
| securedBy | SSL/TLS ⓘ |
| supports |
Group Policy-based autoenrollment clients via policy retrieval
ⓘ
certificate enrollment clients ⓘ domain-joined clients ⓘ non-domain-joined clients ⓘ |
| supportsScenario |
enrollment for computers in untrusted domains
ⓘ
enrollment for workgroup computers ⓘ remote certificate enrollment over the internet ⓘ |
| supportsVersion |
Windows 10 certificate enrollment client
ⓘ
Windows 7 certificate enrollment client ⓘ Windows 8 certificate enrollment client ⓘ |
| usedIn |
Active Directory domain environments
NERFINISHED
ⓘ
enterprise public key infrastructure ⓘ |
| uses |
SOAP messages
ⓘ
WS-Trust-based web services ⓘ |
| vendor | Microsoft NERFINISHED ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Certificate Enrollment Policy Web Service Description of subject: Certificate Enrollment Policy Web Service is a Windows server role service that provides policy information over HTTPS to clients requesting digital certificates in an Active Directory Certificate Services environment.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.