Re: Certificate authority



You can install Microsoft Certificate Services, submit your cert request, and have Cert Services issue a cert.

However, since your CA's root certificate is not trusted by your clients automatically, you'd need to get that installed onto your clients otherwise they get a warning about the cert being issued by an untrusted root CA. If you choose an AD-integrated CA, then your domain clients will automatically get this root CA cert.

If you have WM5 devices, I'm not sure how you add your CA's root signing cert in however (without an application from your vendor). You have to submit your cert request to a 3rd party CA (Verisign, Thawte, GoDaddy etc)

Cheers
Ken

"Jim in Cleveland" <JiminCleveland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:BD9D6524-0CD5-4B72-857A-9E4F1E4B81A4@xxxxxxxxxxxxxxxx
I'm trying to Implement the Change Password feature with Outlook Web Access
(Q297121). I followed the procedure documented in Q228821 about generating a
Certificate Request file. I created the file but now it says I have to
submit this file to a Certificate Authority. Where do I find one to submit
this file too? Or, can I generate my own Certificate using Certificate
Services (which is currently not loaded)? Is there something within Windows
that would allow me to do all this right here on this server? Please advise.

Jim

.



Relevant Pages

  • Re: Newbie wants to learn about PKI Server 2003......
    ... 2003 PKI Certificate Security", and have been lurking here for a bit. ... We will implement a 2 tier heirarchy, with the Root CA being offline. ... All clients that attempt revocation checking will first attempt to retrieve the CRL from the ... level below a self-signed cert, so applications that are 3280 compliant would never check the ...
    (microsoft.public.windows.server.security)
  • Re: Change validatiy period of a Root certificate
    ... should not have either an AIA or a CDP URL in it" But when I go to install ... my subordinate stand alone CA it asks me for a Root CA to get it's cert from. ... I picks up my newly created standalone Root CA. ... certificate, copying the certificate to removable media and then installing ...
    (microsoft.public.security)
  • Re: Schannel CertificateChainValidation failing
    ... I am not fully up to speed with certs (root, end entity, ... valid Windows trusted root cert. ... You've enabled certificate revocation checking, and the validation code ...
    (microsoft.public.platformsdk.security)
  • Re: WM5 PEAP with Certificates
    ... to connect to our wireless with my Axim x51v. ... in the trusted root certificate area. ... EAP/TLS and you do need a user and root cert on the device. ...
    (microsoft.public.pocketpc.wireless)
  • Re: Smart Card Logon
    ... Is the root CA issuing the EE certs? ... The issuing CA cert goes in the NTAUTH ... > 2) Created a certificate trust list for it. ... > and validated the third party smart card logon certificate ...
    (microsoft.public.win2000.security)