Re: SSL Certs

From: Keith W. McCammon (km@km.com)
Date: 01/27/03


From: "Keith W. McCammon" <km@km.com>
Date: Mon, 27 Jan 2003 08:11:35 -0500


> 1) So as part of the wizard, if I request a cert from Verisign or some
one
> similar I presume there is a cost involved?

Yes. Verisign costs ~$800US. Others are slightly cheaper. Thawte is
supposed to be good.

> 2) Can I not produce my own cert as the connection will only be used for
> our own employee's and a third party signed cert is not really needed.

Yes. Install Windows 2000 Certificate Services, and you can then act as
your own CA, and issue a certificate for any server, user, client, etc. that
you'd like--at no cost. If you're primarily using this for your own user
base, then this is probably an adequate option.



Relevant Pages

  • Re: SSL Certs
    ... >> 1) So as part of the wizard, if I request a cert from Verisign or some ... Install Windows 2000 Certificate Services, and you can then act as ... > you'd like--at no cost. ...
    (microsoft.public.win2000.security)
  • Enterprise Subordinate CA signed by third party Commercial CA like Verisign/Thawte/etc
    ... about certificate services & PKI..... ... So that means we need a root CA ... the cost to do this seems a bit excessive. ... I have visited both Verisign & Thawte's sites, ...
    (microsoft.public.windows.server.security)
  • enterprise
    ... about certificate services & PKI..... ... So that means we need a root CA ... the cost to do this seems a bit excessive. ... I have visited both Verisign & Thawte's sites, ...
    (microsoft.public.windows.server.security)
  • Re: Proposal for a new PKI model (At least I hope its new)
    ... > Verisign is not going to send a notary to your house for $30. ... > indemnification to relying parties anyway, just to the cert holders. ... they ain't making money anyways. ... PKI is getting killed and it's going down with the Verisign ship. ...
    (sci.crypt)
  • [fw-wiz] Spam (or, how to buy Cheap Korean Cellphones :-)
    ... a cert for free, just need to insert a Turing test to keep the bots out. ... people spend on dealing with spam now, and a one-time cost (of course SPs ... >> but at the end of the day SPAM has gotta be an identity fix, ...
    (Firewall-Wizards)