Re: Certificate Templates - Duplicating template - Issue does not work

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 09/21/04 

Date: Tue, 21 Sep 2004 16:12:42 +0200

I don't know where you read that, but to issue certificates based on v.2
templates you will have to run your CA server on Enterprise Edition. What
you should be able to do is upgrade your Windows 2003 Standard Edition to
Enterprise Edition if you need to modify your certificate templates.

Implementing and Administering Certificate Templates in Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx

Best Practices for Implementing a Microsoft Windows Server2003 Public Key
Infrastructure
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

PKI Enhancements in Windows XP Professional and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx

Windows Server 2003 PKI Operations Guide
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx

Managing a Windows Server 2003 Public Key Infrastructure
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/mngpki.mspx

Advanced Certificate Enrollment and Management
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx

Mike

"klose" <norepl@noreply.com> wrote in message
news:eepE2M%23nEHA.2808@TK2MSFTNGP10.phx.gbl...
> Its a Windows 2003 Std Svr, Enterprise CA was installed.
>
> I read somewhere that Ent Svr was not required, .............
> Is there another option, workaround?
>
> Can I use a V1 template, duplicate and customize it?
>
>
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:efNFaJ%23nEHA.3324@TK2MSFTNGP15.phx.gbl...
> > Hi,
> >
> > Is your CA server running on Windows 2003 Enterprise Edition (not
> > Enterprise
> > setup of CA) but Enterprise Edition of Windows 2003. If you run your CA
> > server on Windows 2003 Standard Edition you won't be able to use v.2
> > certificate templates.
> >
> > Mike
> >
> > "klose" <norepl@noreply.com> wrote in message
> > news:eze8jx9nEHA.596@TK2MSFTNGP11.phx.gbl...
> >> Windows 2003 Enterprise CA
> >>
> >> I need to customize the Web Server certficate so it can be used for
Cisoc
> >> ACS V3.3
> >>
> >> When I duplicate the web server cert, I enable export key, and add CSP
> >> for
> >> MS Base Crypto Provider v1.0. This process seems OK>
> >>
> >> When I open CA to issue this certificate, IT DOES NOT APPEAR, so I can
> >> not
> >> issue it.
> >>
> >> AD has replicated and it still does not show up.
> >>
> >> Please help
> >>
> >>
> >>
> >
> >
>
>

Relevant Pages

  • Re: Certificate template modifying
    ... but you should still be able to edit them on Standard Server, ... to edit the templates, were you a Domain or Enterprise Admin or Local Admin? ... >>2003 Enterprise setup of Windows CA. ... >>> Version 2 certificate templates can only be used to ...
    (microsoft.public.windows.server.security)
  • SEC_E_UNTRUSTED_ROOT
    ... To test my application I have set up a Windows 2000 server ... application and client application are running on the same Windows server. ... certificate and then "imported" it and still the same result. ...
    (microsoft.public.platformsdk.security)
  • Re: CA - Certificate Authority for Authentication?
    ... you can use CA to deploy user certificate in combination with e.g. ... Here are some white papers on how to set up CA server ... Implementing and Administering Certificate Templates in Windows Server 2003 ... You can use Smart Card for remote logons to domain, terminal servers, VPN, ...
    (microsoft.public.windows.server.networking)
  • Re: CA - Certificate Authority for Authentication?
    ... you can use CA to deploy user certificate in combination with e.g. ... Here are some white papers on how to set up CA server ... Implementing and Administering Certificate Templates in Windows Server 2003 ... You can use Smart Card for remote logons to domain, terminal servers, VPN, ...
    (microsoft.public.windows.server.networking)
  • Re: require client certificates SSL
    ... Here are some articles on how to set up Microsoft CA and how to deploy ... Implementing and Administering Certificate Templates in Windows Server 2003 ... Advanced Certificate Enrollment and Management ...
    (microsoft.public.inetserver.iis.security)