Re: Enterprise Certificate Authority question

From: Paul Adare - MVP - Microsoft Virtual PC (padare_at_newsguy.com)
Date: 10/13/04 

Date: Wed, 13 Oct 2004 06:56:47 -0400

In article <#NRhQ7QsEHA.160@TK2MSFTNGP11.phx.gbl>, in the
microsoft.public.win2000.security news group, Miha Pihler <mihap-
news@atlantis.si> says...

> To check if you have a certificate server. Check if domain controller has a
> certificate. If it does open it and click on Details and look for field
> called CRL Distribution Point. Look for URL (e.g. http://server.domain.com/)
> This should tell you the name of the server.
>

Actually no, this is not a reliable way to determine which server is
functioning as a CA since the CDP and AIA paths in issued certificates
can be set to any location you desire. There is no requirement that
these be hosted on the actual CA. 

-- 
Paul Adare
This posting is provided "AS IS" with no warranties, and confers no
rights.

Relevant Pages

  • RPC over HTTP, Microsoft solution
    ... Exchange Server 2003 RPC over HTTP Deployment Scenarios ... Place a check in the box next to 'Certificate Services' and click 'Yes' ...
    (microsoft.public.exchange.setup)
  • Re: OWA 2003 w/ Smart Card Authentication.
    ... Exchange 2003 server via ActivSync. ... the IIS certificate. ... Whether or not authentication will succeed is completely dictated by ... Server's SSL certificate must be configured on root of v-server via ...
    (microsoft.public.exchange.connectivity)
  • Re: Configuring LDAP on Entourage 2004 OS X
    ... Microsoft CSS Online Newsgroup Support ... does not work with a self signed SSL certificate OR with the SSL ... configure the System to allow OMA and "Server ActiveSync" access from the ... Configuring Exchange Server 2003 for Client Access. ...
    (microsoft.public.windows.server.sbs)
  • Re: Configuring SBS2003 for OWA and RWW
    ... And make sure certificate will not be ... On the Connection Type page, click Broadband, and then click Next. ... next to Preferred DNS server and next to ... If you are using ISA, please go to ISA management console, and navigate ...
    (microsoft.public.windows.server.sbs)
  • Re: Certificate Question
    ... microsoft.public.windows.server.security news group, Miha Pihler <mihap- ... > the ones with name of internal CA server, though even this option is not ... If you require immediate CRL updates, then you need to look at an OCSP ...
    (microsoft.public.windows.server.security)