Re: Enterprise Root CA Install

From: D. Cross [MS] (dcross@online.microsoft.com)
Date: 04/04/03 

From: "D. Cross [MS]" <dcross@online.microsoft.com>
Date: Fri, 4 Apr 2003 07:49:30 -0800

1. No - it is recommended to use a member server.

2. Mainly key size. The Base provider is just fine for most purposes. 

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Arlis Brown" <ambrown@eyenm.com> wrote in message
news:074901c2f977$2344c890$3301280a@phx.gbl...
> I'm planning on installing a W2K Adv Server Enterprise
> Root CA and have a couple of questions:
>
> 1)  Does the Server have to be a domain controller?  Or,
> is it sufficient that it have access to a DC?  As soon as
> I verify the installation and setup a subordinate
> Enterprise CA, the root server will be taken off line and
> placed in storage.  Therefore, I had reservations about
> promoting it to a DC.
>
> 2)  High Encryption Pack - Currently installed on my
> target server.  I noted additional CSP's are now available
> and wanted advise on selecting something other
> than "Microsoft Base Cryptographic Provider v1.0".  Other
> options are "Microsoft Enhanced Cryptographic Provider
> v1.0" and "Microsoft Strong Cryptographic Provider".  What
> are the pros and cons regarding deviating from the
> default "Microsoft Base Cryptographic Provider v1.0"?
>
> I'll appreciate any feedback on this issue!  Thanks!
>
> Arlis Brown, Network Manager
> Eye Associates of NM, Ltd.
>

Relevant Pages

  • Re: SMS 2003 server not discovering clients.
    ... I have selected to extend to extended Active Directory while installing SMS ... Provider Version: 2.50.3174.1003 ... to server. ...
    (microsoft.public.sms.admin)
  • Re: Perflib errors in event logs after SP2 installation
    ... the server does seem to be working fine. ... System account is a potential security risk. ... Policy provider runs under the Local System account, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Random Network Disconnects
    ... network and the only way I can seem to get it back up is to restart the box. ... Testing IpConfig - pinging the Secondary WINS server... ... DNS Host Name: itdspstest01.itd.edited.edited ... Provider Version:2 ...
    (microsoft.public.windows.server.dns)
  • Re: MIDAS/Datasnap Alternative
    ... DDCAppservice is an I/O Completion Ports ... efficient way of developing server applications. ... Increasing the client base does not typically require ... component for each logical data provider. ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Half Bridge mode and multi-homed box
    ... The router takes all the authentication and link negotiation burden ... > laptop screen whilst I tried to replicate it on the server. ... helldesk of provider) from whoever remembers it for too long. ... The provider's gateway is on a completely different ...
    (comp.unix.bsd.freebsd.misc)