Re: Request certificate without active directory

From: Tony Su (tonysu@su-networking.com)
Date: 04/22/03

  • Next message: Tony Su: "Error HTTP 401.3 - Access denied by ACL on resource" 
    From: "Tony Su" <tonysu@su-networking.com>
Date: Tue, 22 Apr 2003 14:55:57 -0700

    If your SysAdmin knows how to setup his Windows(2K or NT4)
    CA correctly, a User can request and install a certificate
    through a web enrollment process so you as the Dev
    shouldn't need to be concerned with this.

    The web enrollment can also optionally create an actual
    csr file if you don't wish to use the automated process.

    Tony Su

    >-----Original Message-----
    >Yes, a sample tool (script) would be avilable through
    Microsoft PSS
    >developer support or Microsoft Consulting Services.
    >
    >--
    >
    >
    >David B. Cross [MS]
    >
    >--
    >This posting is provided "AS IS" with no warranties, and
    confers no rights.
    >
    >http://support.microsoft.com
    >
    >"Guogang" <nospam@no_such_domain.com> wrote in message
    >news:eePykgGCDHA.3040@TK2MSFTNGP11.phx.gbl...
    >> When I use the certificate console to request
    certificate, it needs a
    >> certificate server in the active directory.
    >> However, we want to send certificate to client over
    Internet. Our CA
    >server
    >> is a stand-alone CA server.
    >>
    >> Is there any tools in Windows XP or .Net Framework that
    can generate a
    >> certifcate request file (just like openssl req -new)?
    So that user can
    >send
    >> the files to CA server, and get a signed certificate?
    >>
    >> Thanks,
    >> Guogang
    >>
    >>
    >
    >
    >.
    >

  • Next message: Tony Su: "Error HTTP 401.3 - Access denied by ACL on resource"

    Relevant Pages

    • Re: Web Certificate Enrollment security problem
      ... CERTSVC_DCOM_ACCESS security group of the server with the CA (have added ... The only thing that doesn't work is Web enrollment. ... access auditing and logging "issue and manage certificate requests" on the ... Have seen that there is a component "Certsrv Request" when launching ...
      (microsoft.public.security)
    • Re: Computer and User Certificates Issues
      ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
      (microsoft.public.security)
    • Re: Cannot request computer certificate.
      ... request a computer certificate for about 9 months. ... and verify that you can get a computer/server certificate from it. ... List of NetBt transports currently bound to the Redir ... DNS Host Name: srvr3.domain.com ...
      (microsoft.public.windows.server.security)
    • Re: Offline creation of machine certificates for VPN access
      ... You could let your remote users request via Web Enrollment. ... connect via pptp and then request a certificate via Web Enrollment ...
      (microsoft.public.windows.server.security)
    • Re: unable to request certificate
      ... the second web enrollment issue is associated with kb article 323172. ... > To use the mmc certificate snapins you need to be using an Enterprise CA ... >> I try to request a new certificate in two ways, ... >> certificates from the available CAs ...
      (microsoft.public.win2000.security)