Re: Smart cards deployment

Hi
Check the Security Ngs.
BTW:
-If you install a subordinate CA that means that you'll need a Root CA or
another subordinate CA, etc...
-The CA deployment needs to be planned carefully.
-CA shouldn't be installed in a DC.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Bobby Gontarski" <BobbyGontarski@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:77234ACD-8FA1-457D-ABCE-05631E6CCE9D@xxxxxxxxxxxxxxxx
Task: implement logon using smartcards for users accross domain.

I have win 2003 server based domain.
What is not much clear to me in the deployment process, do I need to setup
a
subordinate ca server? I want the ca server to be on the same computer as
the
DC and I see no reason for installing two ca servers one of which would
only
issue certificates to this computer (not mentioning that I would have to
buy
a new server for this solution)...

So can I simply get go with the root ca that would issue certficates to
users?

What are the necessary steps if not using subordinate?

Thank you very much...


.

Relevant Pages

  • Installing Certification Authority server for SSL OWA
    ... We have decided to install a CA server for users to securely access ... -Stand-alone Root CA ... -Stand-alone Subordinate CA ...
    (microsoft.public.exchange.admin)
  • Root CA --> Sub CA
    ... We want to use MS Windows 2003 Server soon. ... We are going to generate one stand-alone root CA which is ... need to change the subordinate CA? ... Or is it possible to install a new root CA and all the ...
    (microsoft.public.win2000.security)
  • Re: New Event Log Errors!
    ... Somehow along those lines I'd also installed the Certificate Authority ... Did you apply the last Server Pack for SBS Server? ... Please install Windows Support Tools on the win2k3 sp1 problematic ... Microsoft is providing this information only as a convenience to you: ...
    (microsoft.public.windows.server.sbs)
  • unsubmit
    ... Using a development server also [Roberto ... Can't find cable Internet connec [Roberto ... You can fix that manually by 'apt-get install ... > development machine, so if the production server goes down, we can ...
    (Debian-User)
  • Re: Fax on Terminal Server from SBS2K3
    ... please make sure the Fax service is installed on the TS server. ... you can try the steps below to install Shared Fax Client: ... 248340 Installing and Using Programs in Windows 2000 Terminal Services ...
    (microsoft.public.windows.server.sbs)