Certificate Enrollment on behalf of others on a W2003 Standard Server

Certificate Enrollment on behalf of others on a W2003 Standard Server

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Certificate Enrollment on behalf of others on a W2003 Standard Server Christian Valentin FlexSecure 06-18-2008
Posted by Christian Valentin FlexSecure on June 18, 2008, 8:02 am
If you were  Registered and logged in, you could reply and use other advanced thread options

Hello.

I want to request a certificate on behalf of others on a W2k3 Standard
Server (via the Web Frontend and via the Crypto API in C#).
As far as i know the only way to do so is with an enrollment agent.
All my tries so far were not successful.
Anyone has experience with this topic ?
I would be glad about help.

Best regards



--
Dipl. Inform.
Christian Valentin
FlexSecure GmbH Darmstadt
Tel: 06151 5012318
Fax: 06151 5012319
Web: www.flexsecure.de



Posted by Brian Komar \(MVP\) on June 18, 2008, 12:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yes, you are correct.
You must have an enrollment agent to put some one else's name in the
certificate.
The signing certificate must have the Certificate Request Agent application
policy OID.
You need to provide more details to find out why it is not working for you.
Brian

>
> Hello.
>
> I want to request a certificate on behalf of others on a W2k3 Standard
> Server (via the Web Frontend and via the Crypto API in C#).
> As far as i know the only way to do so is with an enrollment agent.
> All my tries so far were not successful.
> Anyone has experience with this topic ?
> I would be glad about help.
>
> Best regards
>
>
>
> --
> Dipl. Inform.
> Christian Valentin
> FlexSecure GmbH Darmstadt
> Tel: 06151 5012318
> Fax: 06151 5012319
> Web: www.flexsecure.de
>
>


Posted by Christian Valentin FlexSecure on June 19, 2008, 7:02 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks, i advanced a bit further now, but this leads to my next question.

I want to create an enrollment angent signed CMC request in C#.
As far as i understand the MSDN pages, an enrollment agent signed CMC
request can only be implemented in C++, not in VB nor C# and so.

Anyone can confirm this ?

Thanks in advance
cv


--
Dipl. Inform.
Christian Valentin
FlexSecure GmbH Darmstadt
Tel: 06151 5012318
Fax: 06151 5012319
Web: www.flexsecure.de
> Yes, you are correct.
> You must have an enrollment agent to put some one else's name in the
> certificate.
> The signing certificate must have the Certificate Request Agent
application
> policy OID.
> You need to provide more details to find out why it is not working for
you.
> Brian
>
> >
> > Hello.
> >
> > I want to request a certificate on behalf of others on a W2k3 Standard
> > Server (via the Web Frontend and via the Crypto API in C#).
> > As far as i know the only way to do so is with an enrollment agent.
> > All my tries so far were not successful.
> > Anyone has experience with this topic ?
> > I would be glad about help.
> >
> > Best regards
> >
> >
> >
> > --
> > Dipl. Inform.
> > Christian Valentin
> > FlexSecure GmbH Darmstadt
> > Tel: 06151 5012318
> > Fax: 06151 5012319
> > Web: www.flexsecure.de
> >
> >
>



Similar ThreadsPosted
Certificate Enrollment API: Request on behalf of another user February 13, 2008, 9:02 pm
Enrollment agent cannot enroll on behalf of a user... July 10, 2006, 4:38 pm
Certificate Web Enrollment (Server 2003 and Vista) November 14, 2008, 12:16 pm
"No Certificate Templates Could Be Found" Error Message When User Requests Certificate from CA Web Enrollment Pages September 21, 2006, 1:33 pm
Reconciling Password Length NT40 VS W2003 Server March 3, 2006, 9:43 am
Web Certificate Enrollment security problem March 15, 2006, 2:57 am
Problem with WLAN IAS certificate enrollment May 16, 2008, 11:51 am
Windows 2003 Standard Server- Enterprise CA - EFS May 18, 2007, 3:52 pm
Web enrollment, only web server template December 5, 2007, 9:41 am
Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 May 18, 2006, 5:04 pm

The site map in XML format XML site map

Contact Us | Privacy Policy