Using MS CA as public CA

Using MS CA as public CA

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Using MS CA as public CA gal.alton 03-31-2007
Posted by on March 31, 2007, 11:23 am
If you were  Registered and logged in, you could reply and use other advanced thread options
i am looking for a recommended arcitecture using CA 2003 to enroll
web authentication certificate on smartcard for an organization
customers.

I read the article "Configuring and Troubleshooting Windows 2000 and
Windows Server 2003 Certificate Services Web Enrollment"

The customer PC is running XP or Vista and not part of a domain

I have an AD for the customers accounts

what is better, using API and develope some code to create CSR for rhe
CA or change the CA ASPs?

Gal


Posted by S. Pidgorny on March 31, 2007, 7:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
If you're going to enable self-enrollment for your customers over the Web
then they will have to be authenticated for that - probably using password.
That will be your weakest link in security.

I wonder if MS ILM helps in such scenarios.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

>i am looking for a recommended arcitecture using CA 2003 to enroll
> web authentication certificate on smartcard for an organization
> customers.
>
> I read the article "Configuring and Troubleshooting Windows 2000 and
> Windows Server 2003 Certificate Services Web Enrollment"
>
> The customer PC is running XP or Vista and not part of a domain
>
> I have an AD for the customers accounts
>
> what is better, using API and develope some code to create CSR for rhe
> CA or change the CA ASPs?
>
> Gal
>



Similar ThreadsPosted
Public Key Infrastructure September 12, 2005, 2:40 am
Public - Private key June 28, 2007, 11:46 am
Public Addresses Used Internally September 2, 2006, 5:20 pm
public xp media edition February 20, 2007, 8:47 am
public and private cert January 8, 2008, 12:05 am
PKY gurus: why it is not necessary to install a cert under "Public July 23, 2005, 12:16 am
One Care Public Beta Where's the Group(s)? August 2, 2005, 5:37 am
Securing a Public Computer Session December 16, 2006, 5:56 pm
help understanding private/public certs September 2, 2007, 5:30 pm
In the group 'microsoft.public.test' July 11, 2008, 3:52 am

The site map in XML format XML site map

Contact Us | Privacy Policy