Re: Certificate Version Question

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 09/04/03 

Date: Thu, 4 Sep 2003 05:30:34 -0700

yes, you can use the ipsec offline template to request machine certificates
through the web pages.

you can also use certreq.exe in the windows server 2003 adminpak to create a
PKCS #10 request and also submit that request to a CA. 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Steve" <stephen.h.price@intel.com> wrote in message
news:bj53f9$as1$1@news01.intel.com...
> The web enrollment pages support the creation of user certificates.  I
need
> to create machine certificates for Win2000 clients using a Win2003
> enterprise CA.  Is there a way to configure the web enrollment pages to
> allow the request of a machine certificate?  Or, is there a utility that
> will create a PKCS #10 request file for a machine cert much like the IIS
> wizard for creating a request file for an SSL cert?
>
> thanks,
> Steve
>
> "David Cross [MS]" <dcross@online.microsoft.com> wrote in message
> news:OLD14ahcDHA.456@TK2MSFTNGP10.phx.gbl...
> > Windows 2000 does not understand version 2 templates - but can enroll
> > through them through web enrollment where the web enrollment pages are
> > hosted on a windows server 2003 machine.
> >
> >
> >
> > Cert templates -
> >
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deploy/confea
> t/ws03crtm.asp
> >
> >
> > --
> >
> >
> > David B. Cross [MS]
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> > http://support.microsoft.com
> >
> > "Steve" <stephen.h.price@intel.com> wrote in message
> > news:bj337o$h57$1@news01.intel.com...
> > > I have an 2003 enterprise certificate authority running on my network.
> > This
> > > certificate authority is configured to issue certs using both version
1
> > and
> > > version 2 certificate templates.
> > >
> > > Under Windows XP when I start the 'Request new certificate' wizard
from
> > the
> > > 'Certificate' mmc snap-in, the wizard displays both version 1 and
> version
> > 2
> > > certificate templates for which I can make a request.
> > >
> > > Under Windows 2000 client and server the 'Request new certificate'
> wizard
> > > from the 'Certificate' mmc snap-in displays only version 1 certificate
> > > templates.
> > >
> > > Why can't I request a certificate based off of a version 2 certificate
> > > template from Windows 2000?
> > >
> > > thanks,
> > > Steve
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: User Certificates question (No AD)
    ... You should create the templates at ... Now when you go to the web to request the certiificates, ... appear and you can get a certificate to allow the needed. ... web browser cert, e-mail cert and adv cert request. ...
    (microsoft.public.win2000.ras_routing)
  • Re: problem with programmatically created template columns
    ... instantiate the templates ) on every request. ... DataGridTemplate(ListItemType.EditItem, "Column1") ... > disappear upon postback. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Absence Request Template Workflow
    ... > After downloading some of the new MS WSS Templates and following the ... the Employee Absence Request and Vacation Schedule ... > I've managed to get the InfoPath form to correctly submit, ... But I'm missing the connection to the Vacation Schedule ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Problem to enable SSL Communication Over LDAP For W2k Domain Controllers
    ... Is the CA configured to issue any templates? ... > Certificate Request Settings' as stated in step 5 of the article. ... 'Recovery Agents for Crypted Data'. ...
    (microsoft.public.win2000.security)
  • Re: Computer Cerrtificate
    ... enterprise mode always uses templates. ... > I am running enterprize certificate services on win2k3 server standard ... I need to request computer certificate. ...
    (microsoft.public.windows.server.security)