RE: Certificate Services



Hello Victor,

Thank you for posting to the SBS Newsgroup.

I understand that you want to know whether there will be any issues come
out after install Certificate Services on SBS 2K3 Server. If I have
misunderstood your concern, please let me know.

Based on my knowledge, you should be able to install CA on SBS 2K3 Server.
I also found following KB articles for you, please see:

830858 Smart card certificate stops working when you modify a user's name in
http://support.microsoft.com/?id=830858

262262 "Unexpected Error" When Attempting to Use the Smart Card Enrollment
http://support.microsoft.com/?id=262262

308128 CERT WP: Troubleshooting PKI Part N: Smart Card Authentication
http://support.microsoft.com/?id=308128

231881 HOW TO: How to Install/Uninstall a Public Key Certificate Authority
for
http://support.microsoft.com/?id=231881

313490 HOW TO: Enroll a Certificate on Behalf of Another for Smart Cards
Users
http://support.microsoft.com/?id=313490

313274 How To Configure a Certification Authority to Issue Smart Card
http://support.microsoft.com/?id=313274

313272 How to back up and restore a Certificate Authority in Windows 2000
http://support.microsoft.com/?id=313272

To install certificate services on the SBS 2003 box. Please refer to the
following steps:

a. Click "Start", point to "Settings", and then click "Control Panel".

b. Double-click "Add/Remove Programs".

c. Click "Add/Remove Windows Components".

d. Click to select the "Certificate Services "check box.

You may receive the following warning message:

After installing Certificate Services, the computer cannot be renamed and
the computer cannot join or be removed from a domain. Do you want to
continue?

e. Click "Yes", and then click "Next".

f. Select the type of certification authority (CA) that the server will be.
Unless there is another CA in the domain, click "Enterprise Root CA".

g. Enter the CA Identification information, and then click "Next".

h. Select a location for the certificate database and log files, and then
click "Next".

You receive the following warning message:

Internet Information Services is running on this server. You must stop this
service before proceeding. Do you want to stop the service now?

i. Click "OK".

j. Click "Finish".

Since using smart card with certificate is complicated issue, if you had
any issues regarding CA with smart card, we suggest that contact Microsoft
Product Support Services via telephone for better solution and a dedicated
Support Professional can assist with your request. Please be advised that
contacting phone support will be a charged call.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below.

http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.

I am greatly appreciated your understanding!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Date: Wed, 12 Oct 2005 15:07:16 +0200
>From: Victor Ihlar <victor.ihlar@xxxxxxxxxxxxxxxxx>
>User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923)
>X-Accept-Language: en-us, en
>MIME-Version: 1.0
>Subject: Certificate Services
>Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>Content-Transfer-Encoding: 7bit
>Message-ID: <OE2mf3yzFHA.3256@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 212.247.124.217
>Lines: 1
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
9.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:212274
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Will I get any problems if I install Certificate Services on our SBS2003
>std server? We need this since we are going to use smart cards for login
>to some of our computers and so we need to be able to issue certificates
>for these cards.
>
>/Victor
>

.



Relevant Pages

  • Re: Certificate Services fails to start
    ... However for the certificate services has corrupted, ... For now the certificate service is running properly, ... Microsoft CSS Online Newsgroup Support ... If you see a User DSN named CertSrv that is using the Access database, ...
    (microsoft.public.windows.server.sbs)
  • Re: Certificate Services fails to start
    ... Under Database, click Select. ... you may need to reinstall the Certificate ... Backup the CA private key, certificate, and database. ... Uninstall Certificate Services. ...
    (microsoft.public.windows.server.sbs)
  • Re: Certificate Services fails to start
    ... Microsoft CSS Online Newsgroup Support ... certificate service is now running. ... However for the certificate services has corrupted, ... >>Please follow below steps to try to resolve the issue: ...
    (microsoft.public.windows.server.sbs)
  • Re: Questions
    ... deployment tool and certificate services. ... we do have more convenient means to create server /client certificate ...
    (microsoft.public.dotnet.framework.webservices)
  • RE: Certificate Services//InfoPath Form
    ... Server 2003 server. ... I HAVE to install Certificate Services ...
    (microsoft.public.sharepoint.portalserver.development)