Update the default domain policy with the issuing party CA - Access Amazon WorkSpaces with Common Access Cards

This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.

Update the default domain policy with the issuing party CA

Add the issuing CA to the trusted roots in an Active Directory Group Policy object.

To configure Group Policy in the Windows domain to distribute the issuing CA to the trusted root store of all domain computers:

  1. Open Group Policy Management, select your domain root in the navigation tree, and expand the Group Policy Objects container.

  2. Choose the Default Domain Policy Group Policy object, and then choose Edit. A new window opens.

  3. In the left navigation pane, expand the following items:

    • Computer Configuration

    • Policies

    • Windows Settings

    • Security Settings

    • Public Key Policy

  4. Right-click Trusted Root Certification Authorities.

  5. Select All Tasks, then choose Import.

  6. Follow the instructions in the wizard to import the certificate file generated in the Generate the issuing CA certificate, ca_name.cer.

  7. A confirmation window appears when the import is complete. Choose OK.

  8. Close the Group Policy window.