Re: Requesting a certificate for another user

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 04/27/04


Date: Tue, 27 Apr 2004 05:25:28 -0700

technically yes, we support this for smartcards in the web enrollment pages.
if you wanted to do this for any cert type, it would require some
customization of the web pages and some custom code (VBscript). Here are
some c code samples:

http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dncapi/html/certenrollment.asp

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Franc v/d Westelaken" <fvdwestelaken@hotmail.com> wrote in message
news:408e3245.3100000@msnews.microsoft.com...
> Hi,
>
> I've installed a Windows 2003 CA in Enterprise Mode. Is it possible as
> an administrator to request a certificate on behalf of another user ?
> I don't want to burden a user with certificate request. I want to
> request a certificate for that user and distribute it.
>
> Is this possible ?
>
> Franc.


Relevant Pages

  • Re: Web Certificate Enrollment security problem
    ... CERTSVC_DCOM_ACCESS security group of the server with the CA (have added ... The only thing that doesn't work is Web enrollment. ... access auditing and logging "issue and manage certificate requests" on the ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)
  • Re: Offline creation of machine certificates for VPN access
    ... You could let your remote users request via Web Enrollment. ... connect via pptp and then request a certificate via Web Enrollment ...
    (microsoft.public.windows.server.security)
  • Re: unable to request certificate
    ... the second web enrollment issue is associated with kb article 323172. ... > To use the mmc certificate snapins you need to be using an Enterprise CA ... >> I try to request a new certificate in two ways, ... >> certificates from the available CAs ...
    (microsoft.public.win2000.security)
  • Re: Certificate Services Web Enrollment requires admin access
    ... What fails - the certificate request or access to Web Enrollment? ... everyone has list permissions to the virtual website folder which by default would be ...
    (microsoft.public.win2000.general)
  • constrained delegation claims SPNs not registered
    ... I want to publish the internal certificate authority web enrollment page for remote users outside the VPN corporate network to allow them renewing their smartcard certificates manually when they become due. ... The web publishing rule is activated for constrained delegation and the listener is hardended to accept our own certificates only. ... Certificate Services web enrollment page requires integration windows authentication and runs with the default network service identity. ...
    (microsoft.public.isaserver)