This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 43%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPT%3C/text%3E%3C/svg%3E)
Hello,
I have very little experience with Windows Servers and even less with AD-CS.
In our company we use AD-CS to issue certificates for all services, including Linux machines. At the moment the process is manual, but we need to automate it using Ansible.
We start from the very end: Revoke a certificate. We have a few 12s of Linux web servers we plan to decommission soon. And we must revoke their certificates.
I try to find out the following:
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 62%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDZ%3C/text%3E%3C/svg%3E)
Hello Peter Tselios,
Thank you for posting in Q&A forum.
1.Is there any API that I can use with AD-CS? If so, where can I find it's documentation?
A: You can try to type API key word under "Tag" and select the tag related to API you want.
2.If there is no API, how can I revoke a certificate?
A: You can select these certificates and right click them\All Tasks\Revoke Certificate.
3.Has any of you any link/document/blog/git repo with Ansible roles/playbooks that handle AD-CS certificates?
A: I'm sorry I don't know about Ansible roles/playbooks. Maybe you can try to ask your question in Ansible roles/playbooks forum, so that engineers from Ansible roles/playbooks can help you better.
I hope the information above is helpful.
If you have any questions or concerns, please feel free to let us know.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Hello ,
Good day!
How are things going? I have not heard back from you in a few days and wanted to check on the status of your problem. Please let me know the results of your troubleshooting. Your time is greatly appreciated.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
ADCS is a COM server, so it is accessible only via DCOM RPC calls. In other words, there is no HTTP web service to manage CA. If you can use DCOM, then you can use ICertAdmin::RevokeCertificate COM interface to automate certificate revocation.
There are other alternatives, such as:
certutil -revoke command-line tool.p.s. I'm the author of PSPKI module.