Home » Microsoft » 70-640 » What should you do?
Your network contains an Active Directory domain.
The relevant servers in the domain are configured as shown in the following table:
You need to ensure that all device certificate requests use the MD5 hash algorithm.
What should you do?
A. On Server2, run the Certutil tool.
B. On Server1, update the CEP Encryption certificate template.
C. On Server1, update the Exchange Enrollment Agent (Offline Request) template.
D. On Server3, set the value of the HKLMSoftwareMicrosoftCryptographyMSCEPHashAlgorithmHashAlgorithm registry key.
Correct Answer: D
Explanation/Reference:
Reference:
http://technet.microsoft.com/en-us/library/ff955642.aspx
Managing Network Device Enrollment Service Configuring NDES
NDES stores its configuration in the registry key HKEY_LOCAL_MACHINESoftwareMicrosoftCryptographyMSCEP.
To change NDES configuration, edit the NDES registry settings by using Regedit.exe or Reg.exe, then restart IIS. If necessary, create the key and value using the names and data types described in the following table.
Key name
HashAlgorithm HashAlgorithm
Value Data Type
String
Default value
SHA1
Description
Accepted values are SHA1 and MD5.
