Re: Newbie needs info on using SSL.
From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 10/05/04
- Next message: Miha Pihler: "Re: Access for scripting to create directories"
- Previous message: Bill: "Access for scripting to create directories"
- In reply to: Ken Varn: "Re: Newbie needs info on using SSL."
- Next in thread: Bernard: "Re: Newbie needs info on using SSL."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 5 Oct 2004 16:51:27 +0200
<snip>
> Your last paragraph regarding the generation of our own CA seems to fall
> more in line with what we want to do. Could you elaborate further on how
to
> do this?
You would need to setup CA server on Windows 2003 (my recommendation)
server. You could then issue certificates to your web appliances.
In your case, you will probably want to setup standalone CA. On this server
you can define how long will certificates on this appliances last (e.g.
1,2,3 ... years). Only people that will install your CA server's certificate
will trust certificates on your appliances...
Here are some additional resources.
Managing a Windows Server 2003 Public Key Infrastructure
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/mngpki.mspx
Best Practices for Implementing a Microsoft Windows Server2003 Public Key
Infrastructure
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
PKI Enhancements in Windows XP Professional and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx
Windows Server 2003 PKI Operations Guide
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx
Advanced Certificate Enrollment and Management
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx
Implementing and Administering Certificate Templates in Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx
Mike
<snip>
- Next message: Miha Pihler: "Re: Access for scripting to create directories"
- Previous message: Bill: "Access for scripting to create directories"
- In reply to: Ken Varn: "Re: Newbie needs info on using SSL."
- Next in thread: Bernard: "Re: Newbie needs info on using SSL."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
