Microsoft Certificate Authority

Microsoft Certificate Authority

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Microsoft Certificate Authority fec 06-14-2006
Posted by =?Utf-8?B?ZmVj?= on June 14, 2006, 8:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I am trying to setup a Microsoft Certificate Authority but am having
problems. I installed it as and Enterprise Root CA on a Windows 2003 server
with SP1. It is running but I have some questions.

I don't know a whole lot about this so I have been reading and learning.

Does the CA have to be on a domain controller or just need access to a
domain controller? Do I have to have a suborinate CA or can the certificates
be distributed with the Root?

My goal is to be able to use digital signatures with in our business for
time cards. All internal. Any and all information about how to set us the
certificates, distribute to the clients and any other useful info would be
appreciated.

Thank you.

Posted by Michael D. Ober on June 14, 2006, 9:10 am
If you were  Registered and logged in, you could reply and use other advanced thread options

You can run the root CA on a domain controller - that's how I have to do it
as I only have two servers and both are DCs. I don't know if this is the
recommended configuration but if you're hardware & server license restricted
it works just fine.

The Enterprise Root CA can issue certificates.

Mike Ober.

> I am trying to setup a Microsoft Certificate Authority but am having
> problems. I installed it as and Enterprise Root CA on a Windows 2003
server
> with SP1. It is running but I have some questions.
>
> I don't know a whole lot about this so I have been reading and learning.
>
> Does the CA have to be on a domain controller or just need access to a
> domain controller? Do I have to have a suborinate CA or can the
certificates
> be distributed with the Root?
>
> My goal is to be able to use digital signatures with in our business for
> time cards. All internal. Any and all information about how to set us
the
> certificates, distribute to the clients and any other useful info would be
> appreciated.
>
> Thank you.
>




Posted by =?Utf-8?B?VmFzdQ==?= on June 14, 2006, 9:57 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I don't think it has to be a member of the domain or a DC to be able to run a
CA. However if you do make it a member of the domain (or DC), it helps in
distributing the certificates easily.
Depending on the certificate template you choose, you may be able to offer
'autoenrollment' which may greatly simplify your task of getting the
certificates to the users.
Hope this helps.

--Vasu.


"fec" wrote:

> I am trying to setup a Microsoft Certificate Authority but am having
> problems. I installed it as and Enterprise Root CA on a Windows 2003 server
> with SP1. It is running but I have some questions.
>
> I don't know a whole lot about this so I have been reading and learning.
>
> Does the CA have to be on a domain controller or just need access to a
> domain controller? Do I have to have a suborinate CA or can the certificates
> be distributed with the Root?
>
> My goal is to be able to use digital signatures with in our business for
> time cards. All internal. Any and all information about how to set us the
> certificates, distribute to the clients and any other useful info would be
> appreciated.
>
> Thank you.

Similar ThreadsPosted
what type of certificate authority? June 16, 2005, 4:08 pm
Certificate Authority type June 16, 2005, 6:01 pm
Problem with certificate authority January 27, 2006, 9:03 am
Certificate Authority (CA) - Failover Possible? February 24, 2006, 8:20 pm
Problem in Certificate Authority February 23, 2007, 4:09 am
Certificate Authority Settings May 22, 2007, 3:46 pm
Certificate Authority Configuration February 25, 2008, 11:47 pm
Re: Certificate Authority services on W2k forest June 14, 2005, 4:23 pm
Renaming a Certificate Root authority June 28, 2006, 5:16 pm
Local Certificate Authority Server July 7, 2006, 1:53 am

The site map in XML format XML site map

Contact Us | Privacy Policy