Re: Enterprise Certificate Authority and Computer Certificates

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 04/21/04 

Date: Wed, 21 Apr 2004 05:28:55 -0700

use the ipsec offline router template 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Steven Umbach" <n9rou@n0spam-comcast.net> wrote in message
news:72mhc.37567$ru4.37235@attbi_s52...
> You will need to use Web Enroll and enable the offline ipsec template [I
think,
> it is needed for l2tp] in the Certificate Authority Management Console
under
> policy settings. The user requesting the certificate needs to have local
> administrator credentials and the CA certificate will also need to be
requested
> and installed. See the links below for more info.  -- Steve
>
>
http://www.microsoft.com/windows2000/techinfo/planning/security/cawebsteps.asp
> http://support.microsoft.com/default.aspx?scid=kb;en-us;253498  --- may be
of
> help.
>
> "Chris Vain" <anonymous@discussions.microsoft.com> wrote in message
> news:1efe01c4274c$d2170be0$a301280a@phx.gbl...
> > I'm working on a using Microsoft (Windows2000)
> > Certificate Services as a certificate authority for PEAP
> > with IAS. I'm using Group Policy to automatically
> > distribute computer certificates to domain computers and
> > everything is working fine.
> >
> > My one problem is the use of certificates for non domain
> > computers. I can't work out how or if its possible to
> > request a computer certificate manually.
> >
> > Does anyone have any ideas ?
> >
> > Thanks,
> > Chris
> >
>
>

Relevant Pages

  • Re: Group Policy for Computer Certificates
    ... I thought that in windows server 2003 and XP GPO, ... specify a CA in the ACRS settings. ... > I'm attempting to get auto distribution of computer certificates working ... > Automatic Certificate Request Setup Wizard I select Computer certificate, ...
    (microsoft.public.windows.server.security)
  • Re: Group Policy for Computer Certificates
    ... I thought that in windows server 2003 and XP GPO, ... specify a CA in the ACRS settings. ... > I'm attempting to get auto distribution of computer certificates working ... > Automatic Certificate Request Setup Wizard I select Computer certificate, ...
    (microsoft.public.win2000.security)
  • Re: Cert Authority--Enterprise Stand Alone or both?
    ... Certificate Services as a certificate authority for PEAP ... >party CA I agree a Thawte or Verisign will be easier. ... >> go with a 3rd party web server certificate. ...
    (microsoft.public.win2000.security)
  • Re: Certificates
    ... You would use Web Enrollmnet to request a certificate as described in the ... > Windows 2003 Server as long as the client computers ...
    (microsoft.public.win2000.security)