Standalone/ Enterprise CA issue

Standalone/ Enterprise CA issue

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Standalone/ Enterprise CA issue lbcben 10-18-2005
Posted by =?Utf-8?B?bGJjYmVu?= on October 18, 2005, 2:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I need some answer to my simple question

Crrently, my company running Standalone CA(Win2003) as Root, and running
Subordinate Enterprise CA(Win2003), running on AD

2 Question here:
1. Any way to perform auto-renew and auto-enrollment with this structure
with standalone as Root, while Subordinate with Enterprise CA?

2. If cannot perform auto-renew and auto-enrollment, beside reinstall
everything, anyway to convert existing standlone CA(Root) to Enterprise CA
(Root) within the server?


Posted by Paul Adare on October 18, 2005, 4:23 am
If you were  Registered and logged in, you could reply and use other advanced thread options
microsoft.public.security news group, =?Utf-8?B?bGJjYmVu?=

> Hi,
>
> I need some answer to my simple question
>
> Crrently, my company running Standalone CA(Win2003) as Root, and running
> Subordinate Enterprise CA(Win2003), running on AD
>
> 2 Question here:
> 1. Any way to perform auto-renew and auto-enrollment with this structure
> with standalone as Root, while Subordinate with Enterprise CA?

Autorenew and autoenroll which certificates? End entity certificates
that are issued from the SubCA or the CA certificates themselves? If the
former then yes, as long as the clients are XP or above. If the latter,
no. Renewing and enrolling CA certificates is a manual operation.

>
> 2. If cannot perform auto-renew and auto-enrollment, beside reinstall
> everything, anyway to convert existing standlone CA(Root) to Enterprise CA
> (Root) within the server?

No.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

Similar ThreadsPosted
Standalone vs Enterprise root CA security. April 8, 2008, 8:13 pm
Convert Enterprise Root CA to Standalone Root CA and create new Subordinate CAs March 19, 2008, 1:45 am
Issue with enterprise internal Authenticode code signing certificate More options April 3, 2007, 8:41 am
Standalone Root- Standalone Sub September 13, 2005, 3:43 pm
Upgrading to Windows 2003 Enterprise Edition Enterprise CA October 18, 2005, 4:59 am
Standalone CA's and CRL August 27, 2008, 9:10 pm
Restricted groups in a standalone computer October 17, 2006, 12:45 pm
PKI Cert for a website on a standalone server. September 24, 2007, 2:46 pm
Smart Card Authenticatyion to standalone PC January 10, 2008, 7:27 am
standalone CA - cannot use browser to install certs February 1, 2008, 3:41 pm

The site map in XML format XML site map

Contact Us | Privacy Policy