Re: Enterprise Root CA Install

From: Arlis Brown (ambrown@eyenm.com)
Date: 04/04/03 

From: "Arlis Brown" <ambrown@eyenm.com>
Date: Fri, 4 Apr 2003 08:34:18 -0800

All,

Since input on the subject has been limited, I found an
article on the TechNet CDs entitled "Windows 2000
Certificate Services and Public Key Infrastructure".
Within, a comparison was provided between Microsoft's base
CSP and the enhanced CSP. Furthermore, other .Net
articles on PKI recommend using the enhanced CSP for
stronger encryption. Can anybody provide any information
on Microsoft's "Strong" CSP?

Also, I wanted to know if a Enterprise Root CA has to
have a static IP Address. I've covered articles on CA
disaster recovery and many elude to allocating a static IP
Address.

Any input on the subject will be appreciated. Thanks!

Arlis

>-----Original Message-----
>1. No - it is recommended to use a member server.
>
>2. Mainly key size. The Base provider is just fine for
most purposes.
>
>
>
>--
>
>David B. Cross [MS]
>
>--
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>"Arlis Brown" <ambrown@eyenm.com> wrote in message
>news:074901c2f977$2344c890$3301280a@phx.gbl...
>> I'm planning on installing a W2K Adv Server Enterprise
>> Root CA and have a couple of questions:
>>
>> 1) Does the Server have to be a domain controller? Or,
>> is it sufficient that it have access to a DC? As soon
as
>> I verify the installation and setup a subordinate
>> Enterprise CA, the root server will be taken off line
and
>> placed in storage. Therefore, I had reservations about
>> promoting it to a DC.
>>
>> 2) High Encryption Pack - Currently installed on my
>> target server. I noted additional CSP's are now
available
>> and wanted advise on selecting something other
>> than "Microsoft Base Cryptographic Provider v1.0".
Other
>> options are "Microsoft Enhanced Cryptographic Provider
>> v1.0" and "Microsoft Strong Cryptographic Provider".
What
>> are the pros and cons regarding deviating from the
>> default "Microsoft Base Cryptographic Provider v1.0"?
>>
>> I'll appreciate any feedback on this issue! Thanks!
>>
>> Arlis Brown, Network Manager
>> Eye Associates of NM, Ltd.
>>
>
>
>.
>

Relevant Pages

  • WSS FAQ additions and changes - 4th - 10th December 2006
    ... Non-MS Articles below were valid at the time I added them to the WSS FAQ ... Microsoft Forefront Security for SharePoint ... Microsoft Forefront Security for SharePoint 10.0 MOM 2005 Management Pack ... Planning and architecture for Office SharePoint Server 2007 for Search ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Access 2010 article
    ... Are there other articles or documentation that you can now pass along, ... called ACE) and those table triggers and procedures will again run for you. ... This means we have stored procedures just like server based system ... These data macros will thus run without you having to modify the ...
    (comp.databases.ms-access)
  • Re: leafnode help please !
    ... news server at the slow speeds but if you wanna see what other people ... of quoted text and the start of what you are typing. ... do not see the articles displayed in the way that Google does it. ... The bits of Unix that you have on your Mac are only those parts needed to ...
    (news.software.readers)
  • WSS FAQ additions and corrections - 4th - 10th May 2008
    ... Non-MS Articles below were valid at the time I added them to the WSS FAQ ... NOTE: Amendment to KB articles: Microsoft are not not amending the date of a KB article if the change made is marked as a version point change. ... You are prompted multiple times for authentication when you try to access Central Administration, or you receive an error message when you try to configure the Office SharePoint Server Search service in SharePoint Server 2007 ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: news.sunsite.dk ate UKRM!
    ... so if one peer has missing articles ... My server does this already, it is a part of what I pay F9 to do. ... pointless without their upstream feeds. ... ISP, how many times do I have to tell you? ...
    (uk.rec.motorcycles)
Quantcast