Re: Renaming a Certificate Root authority

OK. If you are going to create a subordinate issuing CA be sure to configure
the certificate templates so that only the CA you want is issuing
certificates to the computers/users that need the new issued by field. You
can configure which certificate templates a CA will issue in the Certificate
Authority Management Console mmc snapin and selecting which CA to
manage. --- Steve


"Bill" <Bill@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1456BE5A-E532-43BF-8327-D7F9AA70F02A@xxxxxxxxxxxxxxxx
Thank you, that helps very much. I think I'll try creating a subordinate.

"Steven L Umbach" wrote:

You can't change issued certificates and you can't rename a Certificate
Authority. You can create a new Certificate Authority with the name you
need. You can run into problems with "old" certificates if the
computers/applicaions no longer trusts the CA that issued them and when
Certificate Revocation Lists are no longer available. Creating a new CA
that
is a subordinate CA to an existing CA with the name you want would be a
relatively safe way to go if that could be a possibility. --- Steve


ttp://www.microsoft.com/windowsserver2003/technologies/pki/default.mspx
---
Public Key Infrastructure for Windows Server 2003


"Bill" <Bill@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D1CC5F2C-F951-4BA1-8787-A1756F1CF034@xxxxxxxxxxxxxxxx
I need to rename the certificate root, the "issued by" field on the
certificate. Is this possible with Windows 2000, or Win2k3? If so,
would
the certificates previously issued by that CA be invalidated?

Thank you,

Bill






.

Relevant Pages

  • Re: Windows 2003 - Child domain cannot request certificate from root domain
    ... The main thing is that you have to modify the permissions on the certificate templates you wish to issue. ... After following the Certificate Request Wizard in the MMC Certificate ...
    (microsoft.public.windows.server.security)
  • Re: Using w2k3 IAS / wifi / PEAP / WPA with NT4 domain??
    ... open certificate server snap-in and make sure RAS and IAS ... I am still curious about not> having certificate templates. ...
    (microsoft.public.internet.radius)
  • Re: Certificate Server..
    ... > Then installed certificate server. ... > templates theres only 2000 certificate templates. ... Scientists were excited this week at having isolated a brief sound which occurred immediately before the Big Bang. ...
    (microsoft.public.windows.server.security)
  • Re: how to get a web site certificate through my stand alone CA
    ... - Open the 'Certificate Templates' tab. ... Check if 'Web Server' is listed as ... You should now see Web Server as one of the certificate templates, ... connecting to the web site as an administrator. ...
    (microsoft.public.security)
  • Re: Certificate Services templates - code signing? SBS 2003
    ... We've already figured out how to create code-signing certs and to even propagate them to the Trusted folder of each users cert store via group policy. ... It's just that the functionality to create custom certificate templates has been disabled in SBS 2003 and I was hoping somebody had a work around. ... I cannot use the duplicate certificate template to issue new certificates. ...
    (microsoft.public.windows.server.sbs)