Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA

From: Marin Marinov (mlmarinov_at_askme.ca)
Date: 05/10/04


Date: Mon, 10 May 2004 09:53:53 -0400

In article <OoY4$CHNEHA.268@TK2MSFTNGP11.phx.gbl>, homeboy@greekgod.net
says...
> I have just added an Enterprise subordinate CA to my AD domain, which
> already had a standalone root CA. I have issued the enterprise subordinate
> certificate on the standalone root CA. How do I export this certificate to
> my Enterprise subordinate CA so that I may enable it?
>
> Edward W. Ray
>
1) Exporting the certificate

>From the CA console on the root CA, under Issued certificates, double-
click the certificate and on the Details pane click "Copy to file".
Export as PKCS#7, select "Include all certificates in certification
path"

2) Importing at the subordinate
In CA console, right-click <CAName>, All tasks \Install CA Certificate.
Provide the exported file from 1)

HTH

-- 
Cheers,
   Marin Marinov
   MCT,MCSE 2003,MCSE:Security 2003
-
This posting is provided "AS IS" with no warranties, and confers no 
rights.


Relevant Pages

  • panic ! - users cannot request new certificate
    ... Users cannot request new certificate from a enterprise subordinate CA ... The error message is "No certificate templates could be found. ...
    (microsoft.public.windows.server.setup)
  • Secure Exchange 2003 Web access
    ... I'm trying to setup seucre exchange 2003 web access, ... I'm going to create my own certificate instead of purchasing one...but I'm ... Enterprise root CA, enterprise subordinate CA, stand alone root CA, ...
    (microsoft.public.exchange.setup)
  • Obtaining Enterprise subordinate CA certificate from a a stanalone root CA
    ... I have issued the enterprise subordinate ... certificate on the standalone root CA. ... Edward W. Ray ...
    (microsoft.public.windows.server.active_directory)
  • Re: Obtaining Enterprise subordinate CA certificate from a a stanalone root CA
    ... the Enterprise CA. Seems kind of a strange configuration to have the root ... > certificate on the standalone root CA. ... > my Enterprise subordinate CA so that I may enable it? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Enterprise Root CA Install
    ... the CRL and publishing the offline CA's certificate to ... The only item left uncovered is verifying whether the CRL ... >> 1) Declaring the location of standalone Root CA's CRL ... >> 2) Publishing the standalone Root CA's certificate to ...
    (microsoft.public.win2000.security)