Re: How to? Certificate Server 1.0 root certificate renewal

From: Craig Humphrey (CraigHumphreyHatesSpam_at_newsgroup.nospam)
Date: 02/09/05

  • Next message: Jiri Richter [MSFT]: "Re: SelfSSL: Failed to acquire the cryptographic context" 
    Date: Thu, 10 Feb 2005 11:23:14 +1300

    Hi,
    Just getting back to this...

    Is it possible to generate a new certificate for the NT CA?

    That's actually going to be the simplest solution, since it doesn't require
    any new infrastructure and the impact on users will be exactly the same as
    if I built a new CA. The impact being that all existing, valid, certificate
    holders will need new certificates.

    Soon'ish
    Craig

    ""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
    news:Exi13ZqAFHA.2732@cpmsftngxa10.phx.gbl...
    > Hi Craig,
    >
    > "Does IIS need the CA running to authenticate users who present
    > certificates?"
    > Yes, IIS and the client browser machine may need to connect to the CA
    > to retrieve CRL(certificate revocation list). If CA is unavailable in
    > this case, the SSL communication may become extremely slow but should
    > be still workable.
    >
    > "It's looking like we may end up installing a new CA on a win2k box
    > and using that until our new win2k3 CA's are ready."
    > Looks like this is the ideal plan.
    >
    > Thanks.
    >
    > Best regards,
    >
    > WenJun Zhang
    > Microsoft Online Support
    > This posting is provided "AS IS" with no warranties, and confers no
    > rights.
    > Get Secure! - www.microsoft.com/security
    >

  • Next message: Jiri Richter [MSFT]: "Re: SelfSSL: Failed to acquire the cryptographic context"

    Relevant Pages

    • RE: ssl certificate error on public folders
      ... "Finish" to remove the certificate. ... Restart the IIS Admin service in the services mmc. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • RE: ssl certificate error on public folders
      ... "Finish" to remove the certificate. ... Restart the IIS Admin service in the services mmc. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • Re: security header is not present in the incoming message
      ... Similar problem appears when I run my client directly under IIS instead of under ASP.NET Development Server. ... There are no certificates in the certificate store that match the find value of 'CN=WSE2QuickStartServer'. ... 'Hello World with certificate policy. ...
      (microsoft.public.dotnet.security)
    • Re: Problems setting up SSL on Exchange 2003 Front End server
      ... No it doesn't look like there is anything under IIS Manager about CertSrv, ... It was installed in preperation for the Exchange FE server. ... My certificate knoweldge is fairly minimal. ...
      (microsoft.public.exchange.admin)
    • RE: Secure Channel and StandAlone IIS box.
      ... my understanding is that you want to configure SSL for IIS server. ... To enable SSL in IIS, you must first obtain a certificate that is used to encrypt and decrypt the information that is transferred over the network. ... Secure Channel and StandAlone IIS box. ...
      (microsoft.public.win2000.security)
    • Quantcast