Re: Why enterprise root CA automatically isue certificates.
From: izael (izael.ochoa_at_reforma.com)
Date: 01/21/04
- Next message: Richard McCall [MSFT]: "Re: Bios Password"
- Previous message: ron: "forgot pass word to log into windows 2000 professional"
- In reply to: Brian Komar : "Re: Why enterprise root CA automatically isue certificates."
- Next in thread: Brian Komar : "Re: Why enterprise root CA automatically isue certificates."
- Reply: Brian Komar : "Re: Why enterprise root CA automatically isue certificates."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 21 Jan 2004 09:52:00 -0800
Brian Komar <bkomar@komarconsulting.com.nospam> wrote in message news:<MPG.1a771c9b7bea02ea9896ad@msnews.microsoft.com>...
> In article <d51193cc.0401200841.7a1c35fe@posting.google.com>,
> izael.ochoa@reforma.com says...
> > Brian Komar <bkomar@komarconsulting.com.nospam> wrote in message news:<MPG.1a766a2a1acce81e9896ac@msnews.microsoft.com>...
> > > In article <d51193cc.0401191208.9af83ba@posting.google.com>,
> > > izael.ochoa@reforma.com says...
> > > > Microsoft win2000 Enterprise Root CA NOT automatically issue
> > > > certificates?
> > > >
> > > > I want that an Administrator authorize any certificate request before
> > > > the certificate could be issued. I need to use an Enterprise root CA
> > > > because EAP-TLS only work with Enterprise CAs. Is it possible?
> > > >
> > > > Thanks.
> > > >
> > > >
> > > You can change the default properties of the CA.
> > >
> > > 1) Open the Certification Authority
> > > 2) View the properties of the CA
> > > 3) View hte Policy module
> > > 4) Change the default Request Handling from using the ertificat etempalt
> > > to set the certificate request status to pending.
> > >
> > > Brian
> >
> >
> > Thaks Brian, but that procedure only works in a standalone CA. In an
> > Enterprise CA the optios is disabled, is ther a way to enable it?
> >
> For an enterprise CA in Windows 2000, the default behavior is to base
> the enrollment decision based on the DACL on the certificate template.
> If you want to use pending of certificates, I recommend upgrading to the
> win2k3 enterprise server running on enterprise edition.
>
> Then, on a certificate template basis, you can choose to require CA
> certificate manager approval for a specific certificate template.
>
> With Windows 2000, the option is not available, as you have seen.
>
> Brian
Thanks Brian!!!
- Next message: Richard McCall [MSFT]: "Re: Bios Password"
- Previous message: ron: "forgot pass word to log into windows 2000 professional"
- In reply to: Brian Komar : "Re: Why enterprise root CA automatically isue certificates."
- Next in thread: Brian Komar : "Re: Why enterprise root CA automatically isue certificates."
- Reply: Brian Komar : "Re: Why enterprise root CA automatically isue certificates."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
