Enterprise Root CA Install

From: Arlis Brown (ambrown@eyenm.com)
Date: 04/03/03 

From: "Arlis Brown" <ambrown@eyenm.com>
Date: Wed, 2 Apr 2003 16:22:40 -0800

I'm planning on installing a W2K Adv Server Enterprise
Root CA and have a couple of questions:

1) Does the Server have to be a domain controller? Or,
is it sufficient that it have access to a DC? As soon as
I verify the installation and setup a subordinate
Enterprise CA, the root server will be taken off line and
placed in storage. Therefore, I had reservations about
promoting it to a DC.

2) High Encryption Pack - Currently installed on my
target server. I noted additional CSP's are now available
and wanted advise on selecting something other
than "Microsoft Base Cryptographic Provider v1.0". Other
options are "Microsoft Enhanced Cryptographic Provider
v1.0" and "Microsoft Strong Cryptographic Provider". What
are the pros and cons regarding deviating from the
default "Microsoft Base Cryptographic Provider v1.0"?

I'll appreciate any feedback on this issue! Thanks!

Arlis Brown, Network Manager
Eye Associates of NM, Ltd.

Relevant Pages

  • Re: Enterprise Root CA Install
    ... No - it is recommended to use a member server. ... The Base provider is just fine for most purposes. ... > I'm planning on installing a W2K Adv Server Enterprise> Root CA and have a couple of questions:> ... Other> options are "Microsoft Enhanced Cryptographic Provider> v1.0" and "Microsoft Strong Cryptographic Provider". ...
    (microsoft.public.win2000.security)
  • Re: Root Cert Errors on Tiger with SP2
    ... My root certificate works flawlessly with every other mail client ... > intermediate authority referencing the root CA cert. ... > same intermediate CA as the server cert). ... > I also have tried installing the certs ...
    (microsoft.public.mac.office.entourage)
  • RE: Cant connect in to server!
    ... Cant access remote web workplace from outside server, ... Installing RRAS returned OK ... > address 3389 on the command line and paste the results to the newsgroup. ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RFX Networks/ RackAdmin.com ALERT
    ... below was posted to some security websites. ... | in security and scalable server management on varying levels. ... Got Root? ... Your Server login ID is: ...
    (comp.os.linux)
  • RFX NETWORKS ALERT
    ... below was posted to some security websites. ... | in security and scalable server management on varying levels. ... Got Root? ... Your Server login ID is: ...
    (alt.linux)