You implement cross-forest enrollment between Contoso.com and Fabrikam.com.
You receive version errors when you deploy updated certificates from the Contoso domain to the
Fabrikam domain.
You need to ensure that you can deploy the certificates to the fabrikam.com domain.
What should you do?
A.
Run the following Windows PowerShell script:
DumpADObj.ps1 –ForestName fabrikam.com
B.
Run the following Windows PowerShell script:
PKISync.ps1 -sourceforest contoso.com -targetforest fabricam.com -f
C.
Run the following Windows PowerShell command:
Get-CertificationAuthority contoso.com | Get-PendingRequest | Approve-CertificateRequest
D.
Run the following Windows PowerShell command:
Get-CertificationAuthority –Name contoso.com | Get-PolicyModuleFlag | Enable-PolicyModuleFlag
EnableOCSPRevNoCheck, DisableExtensionList -RestartCA
Explanation:
AD CS: DumpADObj.ps1 Script for Cross-forest Certificate Enrollment
https://technet.microsoft.com/en-us/library/ff961505(v=ws.10).aspx