Certificate Enrollment Policy Web Service
E726429
Certificate Enrollment Policy Web Service is a Windows server role service that provides policy information over HTTPS to clients requesting digital certificates in an Active Directory Certificate Services environment.
All labels observed (2)
| Label | Occurrences |
|---|---|
| Certificate Enrollment Policy Web Service canonical | 2 |
| Microsoft Docs for AD CS enrollment web services | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T8288922 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Certificate Enrollment Policy Web Service Context triple: [Active Directory Certificate Services, component, Certificate Enrollment Policy Web Service]
-
A.
Certificate Enrollment Web Service
Certificate Enrollment Web Service is a Windows server role service that enables certificate enrollment and renewal over HTTPS, typically used with Active Directory Certificate Services to support remote and policy-based certificate requests.
-
B.
Active Directory Certificate Services
Active Directory Certificate Services is a Windows Server role that provides public key infrastructure (PKI) functionality for issuing, managing, and validating digital certificates within an organization’s network.
-
C.
PKI
PKI is the abbreviation for Partai Komunis Indonesia, the former communist party of Indonesia that played a major role in the country’s mid-20th-century political history.
-
D.
Network Device Enrollment Service
Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
-
E.
Windows Certificate Store
Windows Certificate Store is a built-in Windows subsystem that securely stores and manages digital certificates and their associated private keys for use by applications and services.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Certificate Enrollment Policy Web Service Target entity description: Certificate Enrollment Policy Web Service is a Windows server role service that provides policy information over HTTPS to clients requesting digital certificates in an Active Directory Certificate Services environment.
-
A.
Certificate Enrollment Web Service
Certificate Enrollment Web Service is a Windows server role service that enables certificate enrollment and renewal over HTTPS, typically used with Active Directory Certificate Services to support remote and policy-based certificate requests.
-
B.
Active Directory Certificate Services
Active Directory Certificate Services is a Windows Server role that provides public key infrastructure (PKI) functionality for issuing, managing, and validating digital certificates within an organization’s network.
-
C.
PKI
PKI is the abbreviation for Partai Komunis Indonesia, the former communist party of Indonesia that played a major role in the country’s mid-20th-century political history.
-
D.
Network Device Enrollment Service
Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
-
E.
Windows Certificate Store
Windows Certificate Store is a built-in Windows subsystem that securely stores and manages digital certificates and their associated private keys for use by applications and services.
- F. None of above. chosen
Statements (45)
| Predicate | Object |
|---|---|
| instanceOf |
Active Directory Certificate Services component
ⓘ
Windows Server role service ⓘ |
| authenticationMethods |
Kerberos authentication
ⓘ
client certificate authentication ⓘ username and password authentication ⓘ |
| category | security infrastructure component ⓘ |
| communicatesWith | Certificate Enrollment Web Service ⓘ |
| configuredUsing |
Certificates snap-in
ⓘ
Server Manager ⓘ |
| configuredWith | service connection point in Active Directory ⓘ |
| dependsOn |
Active Directory Domain Services
ⓘ
linked to:
Active Directory
|
| documentation |
Microsoft Docs for AD CS enrollment web services
ⓘ
linked to:
Certificate Enrollment Policy Web Service
|
| exposes | certificate enrollment policy over web services ⓘ |
| exposesEndpoint | policy service URL for certificate enrollment clients ⓘ |
| introducedIn |
Windows Server 2008 R2
ⓘ
linked to:
Windows Server 2008
|
| partOf |
AD CS enrollment web services
ⓘ
linked to:
Network Device Enrollment Service
|
| protocol | HTTPS ⓘ |
| providedBy | Active Directory Certificate Services ⓘ |
| provides |
certificate issuance requirements
ⓘ
certificate template information ⓘ policy constraints for certificate requests ⓘ |
| purpose |
provide certificate enrollment policy information to clients
ⓘ
support certificate enrollment in AD CS environments ⓘ |
| requires |
Active Directory Certificate Services certification authority
ⓘ
linked to:
Active Directory Certificate Services
IIS ⓘ SSL certificate ⓘ service account ⓘ |
| roleServiceOf |
Active Directory Certificate Services role
ⓘ
linked to:
Active Directory Certificate Services
|
| runsOn | Windows Server ⓘ |
| securedBy | SSL/TLS ⓘ |
| supports |
Group Policy-based autoenrollment clients via policy retrieval
ⓘ
certificate enrollment clients ⓘ domain-joined clients ⓘ non-domain-joined clients ⓘ |
| supportsScenario |
enrollment for computers in untrusted domains
ⓘ
enrollment for workgroup computers ⓘ remote certificate enrollment over the internet ⓘ |
| supportsVersion |
Windows 10 certificate enrollment client
ⓘ
Windows 7 certificate enrollment client ⓘ Windows 8 certificate enrollment client ⓘ |
| usedIn |
Active Directory domain environments
ⓘ
linked to:
Active Directory domain
enterprise public key infrastructure ⓘ |
| uses |
SOAP messages
ⓘ
WS-Trust-based web services ⓘ |
| vendor | Microsoft ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Certificate Enrollment Policy Web Service Description of subject: Certificate Enrollment Policy Web Service is a Windows server role service that provides policy information over HTTPS to clients requesting digital certificates in an Active Directory Certificate Services environment.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.
Certificate Enrollment Policy Web Service
→
documentation
→
Microsoft Docs for AD CS enrollment web services
ⓘ
linked to: Certificate Enrollment Policy Web Service