CDP container in Active Directory required if not part of AD?

Question

We have a Microsoft Active Directory Certificate Services Enterprise CA.

After installing the service, an AD container is created within CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=example,DC=com

Our CDP is http-only. There is no LDAP path added. Should I keep or remove this container?

score 2 · Accepted Answer · answered Jan 24 '22 at 15:33

2

Keep it as is. Just do not use (as you already do) and keep it empty.

answered Jan 24 '22 at 15:33

Crypt32

Alright. Wasn't sure if the AD computers query it, while the ADCS server perhaps never updates it. – Daniel Jan 24 '22 at 16:41
If there are no references to CDP container in certificates, no one will query it. – Crypt32 Jan 24 '22 at 17:23

1 Answers1