Re: Issuing Certificates

From: Rajesh Kumar [MSFT] (rajkumar_at_online.microsoft.com)
Date: 05/02/03 

Date: Thu, 1 May 2003 21:00:14 -0700

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windowsserver2003/proddocs/server/sec_auth_certobtainsrv.asp talks about
how to do that.
Basically you need to ensure following:
1. Enterprise CA is configured to issue "User" certificate template (CA
snap-in->Policy settings)
2. Authenticated users have enroll permission on "User" certificate template
Domain users can request certificate through Certificate snap-in or through
web page http:// Machine Name>/certsrv. Later requires IIS to be
installed on the CA machine.

Rajesh

-
This posting is provided "AS IS" with no warranties and confers no rights.

"Gabe Matteson" <gmatteson@cox.net> wrote in message
news:#CgKAEEEDHA.2596@TK2MSFTNGP11.phx.gbl...
> How do I issue a user a certificate, I have AD and an enterprise ca. I
want
> them to have their own certs so that they can encrypt their files and sign
> their email? can anyone shed some light? thank you.
> - Gabe
>
>

Relevant Pages

  • RE: Upgrade Standard CA to an Enterprise CA
    ... Do you mean you want to migrate the stand-alone CA to Enterprise CA? ... Back up the certificate database, the CA certificate, and the CA private ... 8.Select Preserve existing certificate database to use the old database. ...
    (microsoft.public.security)
  • Re: Requesting Computer Certificates
    ... You indeed have an Enterprise CA, ... Certificate ... Can you request a User ... check the DACLs on the Computer certificate template (in ...
    (microsoft.public.windows.server.security)
  • Re: Can not Edit User Certificate template
    ... You need to upgrade your CA to Enterprise Edition. ... Detailed in the Certificate Templates whitepaper: ... I created a new user certificate Template in windows 2003 using the ... >>I want to edit the user certificate template so I can change the experation ...
    (microsoft.public.windows.server.security)
  • Re: Isolation of the Root CA
    ... If you want to put your Enterprise CA behind a firewall, ... practice article on that? ... >> An Enterprise CA can not be an offline CA. ... >> standalone root CA and use it to issue a certificate for an Enterprise CA ...
    (microsoft.public.win2000.security)
  • Re: EFS and Certificate Services
    ... > I created a Enterprise Root CA with a Enterprise Subordinate CA for issuing ... An Enterprise Root CA computer cannot be offline. ... I check the thumbprint of the file and the certificate which matched. ... The best practice is to issue the certificates *before* any encryption ...
    (microsoft.public.win2000.security)