Remove Certificate services

Remove Certificate services
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Remove Certificate services =?Utf-8?B?bWljaGlnYW4=?= 06-24-2005
Posted by =?Utf-8?B?bWljaGlnYW4=?= on June 24, 2005, 7:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have a windows 2003 member server that runs an enterprise certicate service.
It is only used to issue a certificate used for OWA. I now want to use the
server as an additional Domain Controller. When I run DCPromo the system
responds that it cant run because it's a CA. If I remove certificates
services will this have any effect on the certificate that's used for OWA ?

Posted by Mark Gamache on June 29, 2005, 5:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
the certificate will remain, however, you will no longer be able to publish
CRLs. This means that browsers will pop up warnings that the certificate
was no able to be validated. You will also not be able to renew the
certificate when it expires.

I'm pretty sure that most browsers will not allow the SSL connection once
the certificate has expired.

Cheers,

--
Mark Gamache
Certified Security Solutions
http://www.css-security.com



>I have a windows 2003 member server that runs an enterprise certicate
>service.
> It is only used to issue a certificate used for OWA. I now want to use
> the
> server as an additional Domain Controller. When I run DCPromo the system
> responds that it cant run because it's a CA. If I remove certificates
> services will this have any effect on the certificate that's used for OWA
> ?



Posted by =?Utf-8?B?RGF5YQ==?= on August 1, 2005, 10:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You can move the CA to another "box" or even put it back on the same server
once the server is promoted to a DC.
It is all very dependent on what you will (do) use your CA for and the
parameters you set in your CRL. If the CRL has a life-time (freshness date)
of only 24 hours, then you need to publish a new CRL every 24 hours. CRL
publishing is established and can be changed with CA parameters.

--
Daya Puls, CISSP
IT Security, Sigma Systems, Marlborough, MA


"michigan" wrote:

> I have a windows 2003 member server that runs an enterprise certicate service.
> It is only used to issue a certificate used for OWA. I now want to use the
> server as an additional Domain Controller. When I run DCPromo the system
> responds that it cant run because it's a CA. If I remove certificates
> services will this have any effect on the certificate that's used for OWA ?

Similar ThreadsPosted
remove certificate for invalid account November 17, 2005, 9:19 am
remove certificate authority server September 4, 2007, 4:30 pm
Remove Certificate Server (root CA) October 31, 2007, 10:56 pm
Need a way to remove a certificate from domain computers June 2, 2008, 10:57 am
How to remove the Subordinate Enteprise CA expired certificate April 3, 2007, 9:38 am
Certificate Services August 3, 2005, 12:22 pm
Certificate Services? August 31, 2005, 8:42 pm
Certificate Services September 5, 2005, 7:01 am
Certificate Services Performance --- August 1, 2005, 10:24 am
Certificate Services: Key Archival November 22, 2005, 4:39 am

The site map in XML format XML site map

Contact Us | Privacy Policy