|
Posted by =?Utf-8?B?bGJjYmVu?= on October 18, 2005, 4:59 am
If you were Registered and logged in, you could reply and use other advanced thread options
Hi,
Currently for Root and Sub CA(Enterprise CA installed), my company are
running on Windows 2003 Standard Edition.
Cos management don encourage us to touch our Root CA, therefore
We intend to upgrade ONLY the Sub CA, which is currently running on Windows
2003 Standard Edition to Windows 2003 Enterprise Edition.
Upon installing 2003 Enterprise Edition, is it still possible to
auto-renew/autoenroll(user/client workstation certificate) once Sub CA
running in Enterprise Edt, while Root CA continue to run in 2003 Standard Edt?
Thanks for your attention.
|
|
Posted by Paul Adare on October 18, 2005, 5:18 am
If you were Registered and logged in, you could reply and use other advanced thread options
microsoft.public.security news group, =?Utf-8?B?bGJjYmVu?=
> Currently for Root and Sub CA(Enterprise CA installed), my company are
> running on Windows 2003 Standard Edition.
>
> Cos management don encourage us to touch our Root CA, therefore
> We intend to upgrade ONLY the Sub CA, which is currently running on Windows
> 2003 Standard Edition to Windows 2003 Enterprise Edition.
Assuming that your root CA is a standalone, offline CA, upgrading it to
Enterprise Edition would be a waste of a license. There's nothing in
Enterprise Edition that a standalone CA needs.
>
> Upon installing 2003 Enterprise Edition, is it still possible to
> auto-renew/autoenroll(user/client workstation certificate) once Sub CA
> running in Enterprise Edt, while Root CA continue to run in 2003 Standard Edt?
Yes, but the same rules apply here. XP or above only for autoenrollment
of user certs. XP or above only for autoenrollment of computer certs
based on V2 templates. Windows 2000 clients can continue to use ACRS for
V1 templates for computer certificates.
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea
|
|
Posted by =?Utf-8?B?bGJjYmVu?= on October 18, 2005, 5:38 am
If you were Registered and logged in, you could reply and use other advanced thread options
but currently both CA servers are running on 2003 Standard edt, with both
Root and Sub installed with Enterprise CA.
Note: My Root(using 2003 Standard edt, with Enterprise CA) still remain
untouch, ONLY touching just Sub CA server.
So if I just upgrade Sub CA, from OS: Win 2003 Standard Edt to OS: Win 2003
Enterprise Edt, autorenew/enroll for overall structure still work?
Thanks for your advice.
|
|
Posted by Paul Adare on October 18, 2005, 5:45 am
If you were Registered and logged in, you could reply and use other advanced thread options
> So if I just upgrade Sub CA, from OS: Win 2003 Standard Edt to OS: Win 2003
> Enterprise Edt, autorenew/enroll for overall structure still work?
>
Yes.
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea
|
|
Posted by =?Utf-8?B?bGJjYmVu?= on October 18, 2005, 5:59 am
If you were Registered and logged in, you could reply and use other advanced thread options
"Paul Adare" wrote:
> microsoft.public.security news group, =?Utf-8?B?bGJjYmVu?=
>
> > So if I just upgrade Sub CA, from OS: Win 2003 Standard Edt to OS: Win 2003
> > Enterprise Edt, autorenew/enroll for overall structure still work?
> >
>
> Yes.
>
> --
> Paul Adare
> MVP - Windows - Virtual Machine
> http://www.identit.ca/blogs/paul/
> "The English language, complete with irony, satire, and sarcasm, has
> survived for centuries without smileys. Only the new crop of modern
> computer geeks finds it impossible to detect a joke that is not clearly
> labeled as such."
> Ray Shea
>
|
| Similar Threads | Posted | | Windows 2003 Standard Server- Enterprise CA - EFS | May 18, 2007, 3:52 pm |
| Windows Server 2003 Enterprise CA certificate renewal | November 17, 2009, 9:26 am |
| Default security policies for Windows 2003 standard and enterprise | September 17, 2007, 12:48 pm |
| Security on 2003 Server Enterprise Edt. | March 15, 2007, 1:38 pm |
| Securing 2003 standard or Enterprise? | November 6, 2008, 10:23 am |
| Interoperability between Window 2000 and 2003 Enterprise CAs | November 7, 2006, 9:51 am |
| Open File - Security Warning in 2003 Enterprise | November 10, 2008, 10:54 am |
| Move Enterprise Certificate Server from 2000 DC to 2003 DC | May 24, 2005, 2:52 pm |
| 2003 Enterprise CA, MSCEP - 0 length cert message on cisco 837 rou | April 29, 2005, 2:14 am |
| Re: Windows Server 2003 Datacanter Edition | February 17, 2006, 9:18 pm |
|
|
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map