hosting a local CA using commercial certifcate chaining



Hello everybody,

I have a question regarding hosting my own Certification Authority in
my company. The scenario is:

We have multiple hosts serving different stuff in the company. We have
to purchase/re-new certificates from commercial CAs which cost huge
amount of money. I want to (and theoretically its possible to) get
just one signed certificate from commercial CA and then sign
subsequent certificates ourselves. My hunt for information on such
setups only resulted in people advising personal CAs for non-public
use. I want to know if anyone of you is using/has setup such setup,
please share your experience with me.

Also, I am wondering would I have to get a special certificate (a CA
certificate) for hosting a CA or a normal one would do?


//Hallx
.



Relevant Pages

  • Re: SSL Connections are slow
    ... MS Exchange Hosting: http://www.intermedia.net/exchangehosting ... I have installed it using the IIS Certificate Wizard ... > Another question.I have heard of SSL accelerators, ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL - page cannot be displayed
    ... Is not my problem becaus eI have only One website ... >MS Exchange Hosting: ... >> second web site, because port 443 is mapped by default ... >> When I hit the site with the first certificate ...
    (microsoft.public.inetserver.iis.security)
  • Re: Install SSL Cert without pending request...
    ... Is the old server IIS? ... I am trying to install a certificate we received from our hosting ... We are taking our webserver in-house and this certificate is from the ... : at our hosting provider. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Install SSL Cert without pending request...
    ... >> I am trying to install a certificate we received from our hosting ... >> at our hosting provider. ... >> IIS without first requesting a certificate. ... >> say you must have a certificate request first. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Not able to connect to SBS using both domain mane or IP remote
    ... The way I had things setup worked before, as far as for the www record ... >> I setup SBS 2003 Standard and everything was working fine, ... >> " Cannot manage Certificate Services. ... > Your server is answering on port 25, ...
    (microsoft.public.windows.server.sbs)