I am replacing my (very) old Windows backend with OES on SLES to manage Windows clients. I am moving all my clients to a new domain running Domain Services for Windows and was hoping there was a way to emulate the Windows CA autoenrollment functionality with the Novell Certificate Services when workstations are joined to the new domain. All of the Windows servers are being decommissioned so I can no longer use Windows CA.

I read the article below but it is quite old so I was hoping there might have been some changes in the past 5 years.

PKI Auto-Enrollment for Novell eDirectory

If not, what do people generally do in these scenarios (excluding "use Windows CA")? This is a small environment so purchasing an external CA is not really an option.

I appreciate any advice!