Re: Assigning Certificates

From: Johnny (jkaftan_at_wts.com)
Date: 07/29/03


Date: Tue, 29 Jul 2003 13:53:38 -0700


User Certificates will not work with IPSEC. It has to be a machine
certificate or an IPSEC certificate.

"Miha Pihler" <miha.pihler@Atlantis-N0Spam.si> wrote in message
news:urh%23HgZVDHA.2052@TK2MSFTNGP10.phx.gbl...
> Yes, that shouldn't be a problem. Don't issue computer certificates but
> user certificates...
>
> Personally I would rather use RSA Secure ID instead of PKI for this but
yes
> it costs some money...
>
> --
> Mike
> MCSA 2K, MCSE 2K, MCT, ...
>
> "Johnny" <jkaftan@wts.com> wrote in message
> news:uYhp9MVVDHA.2268@TK2MSFTNGP11.phx.gbl...
> > My problem is not importing, it is having something to import. I want
to
> > allow users to connect via VPN with Certificates to my network. I want
to
> > be able to generate a certificate and hand it to them on a floppy. Then
> > they can take it home and install it on their computer and get into the
> > network.
> >
> >
> > "Miha Pihler" <miha.pihler@Atlantis-N0Spam.si> wrote in message
> > news:uV2mRAVVDHA.3924@tk2msftngp13.phx.gbl...
> > > It depends on CA policy used. What is the purpose of this certificate?
> > >
> > > In general you can use MMC with Certificate Snap-In to import
> certificate
> > > under Computer Account....
> > >
> > > --
> > > Mike
> > > MCSA 2K, MCSE 2K, MCT, ...
> > >
> > > "Johnny" <jkaftan@wts.com> wrote in message
> > > news:OjW4$JUVDHA.2004@TK2MSFTNGP10.phx.gbl...
> > > > Looking for a way to assign Computer Certificates to machines that
are
> > > never
> > > > on the network. Is there a way for an administrator to create a
> > > certificate
> > > > that can be imported to a Machine's Certificate store. I could then
> > > create
> > > > a certificte, copy it to a floppy and send it home with the user.
> > > >
> > > > Thanks.
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Assigning Certificates
    ... User Certificates will not work with IPSEC. ... certificate or an IPSEC certificate. ... >> allow users to connect via VPN with Certificates to my network. ...
    (microsoft.public.security)
  • Re: Assigning Certificates
    ... User Certificates will not work with IPSEC. ... certificate or an IPSEC certificate. ... >> allow users to connect via VPN with Certificates to my network. ...
    (microsoft.public.win2000.security)
  • Re: RADIUS and Certs
    ... Another option is to buy comercial certificates from third parties. ... IAS on our Windows 2003 server so we can use AD and stop having to ... We are a Windows 2000 domain with W2003 member servers. ... If you install a CA on your production network you won't be able to easily ...
    (microsoft.public.internet.radius)
  • Re: All the members of a network are trusted ho sts
    ... I need to divide the network in trusted groups. ... I lack arguments in order to decide how to define or select trusted hosts ... -The server is a reliable source of time (even though it does not have the ... synchronized are trusted hosts, have trusted generated certificates. ...
    (comp.protocols.time.ntp)
  • Re: [Full-disclosure] HTTP AUTH BASIC monowall.
    ... Since there aren't that many truly critical systems (in my network) ... They need to blindly accept unsigned SSL certificates, ... connect them to the server. ... Harvard Security Group ...
    (Full-Disclosure)