Re: What's the CA if SBS Certificate Services are not installed?
From: Bryan Linton (blinton_at_nospam.connellinsurance.com)
Date: 01/17/05
- Next message: Bryan Linton: "Re: How to join SBS with other no domain server"
- Previous message: KBatMeade: "Re: Yet another Company Web Problem"
- In reply to: Gordon Ryan: "Re: What's the CA if SBS Certificate Services are not installed?"
- Next in thread: SuperGumby [SBS MVP]: "Re: What's the CA if SBS Certificate Services are not installed?"
- Reply: SuperGumby [SBS MVP]: "Re: What's the CA if SBS Certificate Services are not installed?"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 17 Jan 2005 16:47:20 -0600
So if I install certificate services, will it nullify any of the work
already done by the wizard that created the current certificate? Or will
that certificate continue to work, with the now-added ability of being able
to manage the certificate in the CS snap-in? We are running a wireless
network using WPA, and I'd like to be able to automatically secure that
wireless traffic with a certificate (although the pre-shared key is working
fine for now). I'd just have to make sure that when my users are on the
road, the certificate requirement would not interfere with their ability to
connect to public networks at airports and the like.
Thanks,
BJ
"Gordon Ryan" <gryan@r.e.m.o.v.e.this.longneckconsulting.com> wrote in
message news:e$GA7ro%23EHA.3236@TK2MSFTNGP15.phx.gbl...
> The certificate that is created is self issued, so basically the SBS box
> is the CA.
>
> You can use group policy to add the certificate to the list of trusted
> root CAs. Once you do that, all your users will need to do is connect to
> the network and either reboot or run a GPUDATE.
>
> If you want to run a wireless network and use WPA or 802.1x authentication
> then certificate services is a useful addition. As you know, if you want
> to do automatic user enrolment you will need a 2k3 enterprise server.
>
> hth
>
> Gordo
>
> --
> Gordon Ryan
> Longneck Consulting Pty. Ltd
> http://www.longneckconsulting.com
> Central Coast, NSW, Australia
> "Bryan Linton" <blinton@nospam.connellinsurance.com> wrote in message
> news:OAZWnil%23EHA.1544@TK2MSFTNGP11.phx.gbl...
>> We've been using the certificate created by the Wizard (is it the Remote
>> Access Wizard?) for OWA and RWW. However, I've been wanting to get more
>> information on how this was configured and other possible configuration
>> options. For that, it appears that you need to have Certificate Services
>> installed, and currently it is not. My question is, if Certificate
>> Services is not installed, what CA issued this certificate, and how can
>> it be managed?
>>
>> What I'm trying to do is automate as much as possible the issuance of
>> certificates to users/computers in my domain (particularly for laptop
>> users) so when they travel outside the company network and attempt to use
>> OWA, RWW, or Outlook over the Internet, they are not prompted regarding
>> the certificate in any way. I am supporting enough users that manually
>> installing certificates on each computer is not an attractive option.
>> I'm preparing to deploy new desktops and laptops to my entire
>> organization.
>>
>> I understand version 2 templates are not supported since SBS is based on
>> the Standard edition of Server 2003; is there a way to accomplish what I
>> want, short of preconfiguring the certificate on a client and then
>> imaging that machine and deploying the image to all clients?
>>
>> I'm trying to decide if I'll gain any useful benefit or functionality by
>> installing Certificate Services. I have several other Server 2003
>> computers in my domain; I could install Certificate Services on one of
>> those other machines if it would make more sense.
>>
>> Thanks in advance,
>>
>> Bryan
>>
>
>
- Next message: Bryan Linton: "Re: How to join SBS with other no domain server"
- Previous message: KBatMeade: "Re: Yet another Company Web Problem"
- In reply to: Gordon Ryan: "Re: What's the CA if SBS Certificate Services are not installed?"
- Next in thread: SuperGumby [SBS MVP]: "Re: What's the CA if SBS Certificate Services are not installed?"
- Reply: SuperGumby [SBS MVP]: "Re: What's the CA if SBS Certificate Services are not installed?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
