IIS and enterpise sub CA on different machines
- From: "Edward Ray" <ewray@xxxxxxxxxxxxxxxx>
- Date: Thu, 30 Mar 2006 12:50:32 -0800
The Brain Komar texts implies that the enterprise subordinate CA (i.e.
issuing CA) needs to reside on the same machine as IIS. From a security
perspective, this seems like a poor design. From a network standpoint, it
means I have to support multiple IIS servers in my LAN.
Neither is acceptable. I would like to utilize my existing IIS server (not
on issuing CA) to provide certificate enrollment. Adding the virtual
directories seems to be pretty simple, then adding pointers from the CA to
the IIS server.
Is their anything I am missing? If someone has a good reference or web link
on how to set up using this scenario, much appreciated.
Edward W. Ray
CISSP,MCSE+Security,GCIA, GCIH
.
- Prev by Date: Current User Credential Security settings don't seem to allow access when they should.
- Next by Date: Re: run cgi in localhost without SSL?
- Previous by thread: Current User Credential Security settings don't seem to allow access when they should.
- Next by thread: Re: run cgi in localhost without SSL?
- Index(es):
Relevant Pages
|
