Re: Email in the subject name of a certificate

From: DarrenC [MS] (darrenc_at_online.microsoft.com)
Date: 05/27/03 

Date: Mon, 26 May 2003 18:35:31 -0700

It's likely that the RFC822 email address in your account is not populated,
the Windows2000 CA places the RFC822 email address into the Alternative
Subject name of the certificate for Outlook to use when signing email.

1) Open the dsa.msc snapin (Active Directory Users and Computers)
2) Find your user account (RClick on the domain in question and choose:
Find) and expose the Properties
3) On the General Tab you will see the box labeled "E-mail" -- enter your
email address. 

-- 
Regards,
This posting is provided "AS IS" with no warranties, and confers no rights.
"Cranky" <crankykong21@hotmail.com> wrote in message
news:3ed1ddf0$0$26711$ba620e4c@reader1.news.skynet.be...
> Hello,
> I use smart card for smart card logon on windows 2000 and XP.
>
> I use the smart card enrollment station to request a certificate and
create
> the RSA key pair on my smart card.
>
> But now I would like to sign messages in Outlook with the private key
stored
> on the smart card.
> Before I can sign a message, in Outlook I must select a certificate in tje
> properties of my account.
> I do so :
> Tools->Account->*My account*->Properties->Security.
>
> But here when I want to select the certificate by clicking on the button,
> the list of certificate is empty !
> But when I use IE to see the certificate that are stored on my PC, I can
see
> the certificate that I want to choose is in the list.
>
> In fact, when I enroll, I have choose the template "Smartcard User" (not
> Smartcard Logon).
> The CA is a windows CA for our network.
> And in the certificate that is created in the field "subject name", I have
> only :
> CN=My Name
>
> Then I request a free certificate for signing email from Thawte for the
same
> adress mail and in the certificate that I received, here is the subject :
> E=me@my-domain.com
> CN=My Name
>
> Afet installing this certificate, he is now in the list in Outlook and I
can
> sign messages with this certificate.
>
> But I don't want to use a certificate from Thawte, I would like to do all
> (smart card logon and signing message) with the certificate from our CA.
>
> I think the problem comes from the fact that the subject name contain only
> my name and not my email...
>
> So how can I do to have my email adress in the subject name of the
> certificate using the enrollment station ?
> Is it something to configure in the enrollment station or in the template
?
>
> Thanks a lot for your help.
>
>
>