Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA
From: Edward W. Ray \(502974\) (homeboy_at_greekgod.net)
Date: 05/08/04
- Next message: Chris Griffin: "Unable to Ping Domain"
- Previous message: Chriss3: "Re: Please Help (Domain Issue)"
- In reply to: Al Mulnick: "Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA"
- Next in thread: Marin Marinov: "Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 8 May 2004 16:34:59 -0700
Actually, it is strange NOT to have a stand-alone root CA When building a
CA hierarchy using Windows Server 2003 PKI, you should use standalone CAs
for the root and intermediate (every non-issuing CA). This will facilitate
taking these CAs offline. The issuing CAs should can be enterprise CAs.
Having standalone and enterprise subordinate CAs also helps in heterogeneous
environments. I run both Windows and Linux clients and servers, both inside
and outside my AD domain.
"Al Mulnick" <amulnick_No_SPAM@ncDOTrr.com> wrote in message
news:#D1Hr#JNEHA.3668@TK2MSFTNGP11.phx.gbl...
> IIRC, you need to issue the cert as a PKCS #10 file and then copy it over
to
> the Enterprise CA. Seems kind of a strange configuration to have the root
> CA as a standalone and the rest integrated. But...
>
>
>
> "Edward W. Ray (502974)" <homeboy@greekgod.net> wrote in message
> news:OoY4$CHNEHA.268@TK2MSFTNGP11.phx.gbl...
> > I have just added an Enterprise subordinate CA to my AD domain, which
> > already had a standalone root CA. I have issued the enterprise
> subordinate
> > certificate on the standalone root CA. How do I export this certificate
> to
> > my Enterprise subordinate CA so that I may enable it?
> >
> > Edward W. Ray
> >
> >
>
>
- Next message: Chris Griffin: "Unable to Ping Domain"
- Previous message: Chriss3: "Re: Please Help (Domain Issue)"
- In reply to: Al Mulnick: "Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA"
- Next in thread: Marin Marinov: "Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
