Re: Question about MS Certificate Services

From: Eric (eric.h@netcourrier.com)
Date: 09/11/02 

From: "Eric" <eric.h@netcourrier.com>
Date: Wed, 11 Sep 2002 15:32:20 +0200

In fact my question is:
We have an application installed in different countries on Win2k
machines...those machines are not part of a unique domain..there can be
standalone workstations..all connected to the internet...
These applications have a crypto module (developped using the Crypto API in
C++) and they can Encrypt/Decrypt Sign/verify , request new
certificat/Import certificates...
They basically exchange signed and encrypted data using the internet (those
data are email attachments)
Now we'd like to use Certificate Server to deliver them Certificates and
manage CRL, renewal, revocation etc..
Those applications generate their own key pair and send the PKCS10 onto a
LDAP or FTP or whatever (not yet defined) and the CA then get the PKCS10,
validate it, issues the certificate and publish it onto the public
directoroy...
This is basically what we want..
Does a Standalone Certificate Services would be the solution?
Thanks
Eric

"David Cross [MS]" <dcross@online.microsoft.com> wrote in message
news:eGCioQZWCHA.1640@tkmsftngp11...
> The standalone CA works in non-AD environments, yes. The Enterprise CA
mode
> only works in an AD forest.
>
> --
>
> David B. Cross [MS]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Eric" <eric.h@netcourrier.com> wrote in message
> news:#WmkEdYWCHA.2720@tkmsftngp10...
> > Hi,
> >
> > I'd like to know if it's mandatory that Certificate Services under Win2k
> > Server to be on an Active Directory Domain???
> >
> > It's not possible to install and run it on a standalone server outside a
> > domain?
> >
> > Thanks
> > Eric
> >
> >
>
>

Relevant Pages

  • WinXP - Private SSL certificate cannot install?
    ... Am using my own Win2K CA. Have created and installed ... numerous certificates in Win2K and Win2003 websites and ... through IIS5.1 is that the certificate didn't install ... pick the certificate out of the local store to ...
    (microsoft.public.inetserver.iis.security)
  • computer certificate L2TP
    ... You can setup Certificate Services either in StandAlone ... install the Standalone on any Win2K Server even one that ... >I do not what the VPN server or the remote clients to be ...
    (microsoft.public.win2000.security)
  • Re: Question about MS Certificate Services
    ... a standalone CA would be the right type to implment. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... issues the certificate and publish it onto the public ...
    (microsoft.public.win2000.security)
  • Re: IE6 and MS Certificate Services (standalone)
    ... Flaw in Certificate Enrollment Control Could Allow Deletion of Digital ... a version mismatch between either your server or your client. ... IE6 and MS Certificate Services (standalone) ... Server:Win2000 Server with MS Certificate Services ...
    (NT-Bugtraq)
  • Re: Enterprise, Sub-ordinate or Standalone
    ... Is it standalone or enterprise?... ... Certificate Templates folder in the Certification Authority MMC snap- ... Windows SKU you're on. ... Is it a root or sub-ordinate?... ...
    (microsoft.public.windows.server.security)