Thanks Kevin for the answer, but I already have AEP installed. And DCs successfully receives their certificates. But for domain computers i have an error in application log (ID 13, Source AutoEnrollment). That's why i asking about profiles for computers and users like in Microsoft CA. <div class="gmail_quote">2011/1/14 Kevin Unthank <<a href="mailto:kevinu@redhat.com">kevinu@redhat.com</a>> <blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> Hi Andrey, Dogtag should already have a couple of Certificate templates , like 'Domain Controller' and 'WebServer'. The corresponding CA profiles are called 'caDomainController.cfg' and 'caAgentServerCert.cfg'. I'd recommend having a read through the auto enrolment proxy section of the dogtag wiki for further guidance <a href="http://directory.fedoraproject.org/wiki/Auto_Enroll_Documentation" target="_blank">http://directory.fedoraproject.org/wiki/Auto_Enroll_Documentation</a> Cheers, Kev<div class="im"> On 01/14/2011 12:15 AM, Andrey Voronin wrote: </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="im"> Hi! Does somebody has such ready templates like for domain controller? </div> _______________________________________________ Pki-users mailing list <a href="mailto:Pki-users@redhat.com" target="_blank">Pki-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pki-users" target="_blank">https://www.redhat.com/mailman/listinfo/pki-users</a> </blockquote> _______________________________________________ Pki-users mailing list <a href="mailto:Pki-users@redhat.com" target="_blank">Pki-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pki-users" target="_blank">https://www.redhat.com/mailman/listinfo/pki-users</a> </blockquote></div>