Re: Enterprise vs Standalone CA

From: Todd Geib (tgeibnospam@nospamperceptron.com)
Date: 09/04/02 

Date: Wed, 04 Sep 2002 08:38:22 -0400
From: Todd Geib <tgeibnospam@nospamperceptron.com>

Is AD integration the main difference between the two?

I have tried installing both ways and the only difference that I was
able to tell is the enterprise wouldn't let me say "manually approve
certificates" under the certificate manager. I put it up as a
standalone because I wanted to manually approve all certs. Seems like
that setting shouldn't have anything to do with enterprise vs
standalone. Am I missing something?

BTW, thanks for all the posts in the proxy server newsgroup in the past!

S. Pidgorny [MVP] wrote:
> Based on the requirements - mainly, AD integration, Enterprise will be your
> choice. But you may wish to create standalone offline root for further
> security.
>
> --
> Svyatoslav Pidgorny, MS MVP, MCSE
> -= F1 is the key =-
>
> "Todd Geib" <toddgnospam@nospamperceptron.com> wrote in message
> news:O5Pvu$4UCHA.2856@tkmsftngp11...
>
>>Our CA will used to produce certs to be used for IPSec, website, and
>>email encryption. It is the first CA in our organization. We have are
>>just beginning to deploy Active Directory. Users will request certs
>>from both our intranet and the internet. I would like to be able to
>>have an Administrator give consent when issueing certs. I would also
>>like this information to be published in the Active Directory.
>>
>>Based on these requirements, I'm not sure whether I should install
>>certificate services as Enterprise or a Standalone. Any suggestions /
>>advice?
>>
>
>
>

Relevant Pages

  • Main differences between Enterprise CA and Standalone CA ?
    ... one people in my team has made a project with a standalone CA but we are thinking about installing an Enterprise CA as we are using Active Directory. ... We don't have any special needs actually but the advantage to have the Enterprise CA is the auto-enrollment so we would like to install it for the project and not anymore the standalone CA. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Enterprise vs Standalone CA
    ... > and read the necessary document and it looks like Enterprise is the way ... >> The enterprise CAs work closely with the AD. ... >> intervention for decisions of cert issuance, request ... It will issue only a handful of certs ...
    (microsoft.public.win2000.security)
  • Re: Enterprise vs Standalone CA
    ... > A decision between Stand Alone and Enterprise CAs is not just based on one ... > The enterprise CAs work closely with the AD. ... > issue certs based on domain authentication (and thus usually only to domain ... > intervention for decisions of cert issuance, request ...
    (microsoft.public.win2000.security)
  • Re: 2003/R2 certificate server questions
    ... certificates, but I also want to be able to issue random certificates ... Make sure you are running on Enterprise Edition, ... integrated certs in particular. ... I can also uninstall the sub CA, revoke the cert, and reissue new ...
    (microsoft.public.windows.server.security)
  • Re: How to install a new Enterprise Root Certificate Authority to replace an old one?
    ... > Enterprise Root CA to this new server (since apparently Enterprise CAs can't ... The biggest issue will be the need to redeploy all certs. ... CRL will no longer be available. ... and getting the replacement certificates deployed. ...
    (microsoft.public.windows.server.security)