Subordinate CA

From: Sean (Sean_at_discussions.microsoft.com)
Date: 10/15/04 

Date: Fri, 15 Oct 2004 09:53:02 -0700

Hi

My company has an Enterprise Root CA in Colorado and many Subordinate CA in
its offices around the world.

One of these offices having a Subordinate CA with the Enterprise CA in
Colorado wants to use a certificate issued for this CA for a communication
encrypted by SSL between an external OWA client and the external interface of
the ISA server. This office was able to set up a certificate on the OWA
website from its Subordinate CA and the internall users are able to access
OWA using https protocol.
For the extenal access, this office wanted to export this certificate and PK
and then to import it into the ISA server certificate store, but they were
not able to export the private key.
My question is: Is possible use this Subordinate CA in order to get the
certificate for the external OWA access? if so, what should they do in order
to get the private key?
If not, should I install a new Enterprise root CA on the domain of this
office?
If I install this new Enterprise root CA on this office ... could this new
Enterprise root CA cause some conflict with current Subordinate CA?

Thank you for any thought about it

Sean

Relevant Pages

  • SSL
    ... My company has an Enterprise Root CA in Colorado and many Subordinate CA in ... This office was able to set up a certificate on the OWA ... certificate for the external OWA access? ... should I install a new Enterprise root CA on the domain of this ...
    (microsoft.public.inetserver.iis.security)
  • Re: Subordinate CA
    ... Issue OWA it's own certificate on subordinate CA service. ... IIS wizard or web interface to issue new certificate to OWA. ... >> My company has an Enterprise Root CA in Colorado and many Subordinate CA ...
    (microsoft.public.win2000.security)
  • Certificate Services
    ... At present Ive created an Enterprise root CA, ... And the subordinate issues certifcates to ... Ive tried Right Clicking a user account then going to the ... properties and issuing a certificate in the published ...
    (microsoft.public.win2000.security)
  • RE: Subordinate CA
    ... OWA was certificate using IIS. ... It's not able to start after applying SP4 on Subordinate CA's DC ... ... should I install a new Enterprise root CA on the domain of this ...
    (microsoft.public.win2000.security)
  • Re: Which certificate do I have to deploy ? Root CA or Subordinate CA certificate ?
    ... If a subordinate chains to a trusted root CA, ... Best bet is for your to read the certificate revocation and status checking whitepaper that describes how certificates are verified. ...
    (microsoft.public.windows.server.security)