Re: Enterprise Certificate Authority question
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/16/04
- Next message: Steven L Umbach: "Re: exposing TS directly to Internet"
- Previous message: Sean: "RE: Subordinate CA"
- In reply to: T0GGLe: "Re: Enterprise Certificate Authority question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 15 Oct 2004 23:15:41 GMT
Check Active Directory Users and Groups to find the membership of the Cert
Publishers group which would show the actual server names of computers that
may be a CA. If you do not have any server in the domain with the
Certificate Services service running as shown in services.msc then you don't
have an active CA on your network for some reason. You could try to install
a new Enterprise Root CA if you want but the process may balk if Active
Directory thinks there is still an Enterprise CA in the domain. If that
happens I am not sure what the best way to clean up the metadata but see the
link below for advice if that happens and for additional info that may be
helpful. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;555151
"T0GGLe" <jehova1@dsl.pipex.com> wrote in message
news:5a657c10.0410150249.2e05880d@posting.google.com...
> Thanks once again everyone for your help. I know it must be a bit
> frustrating talking to a CA noob and you didn't have to post so
> thanks.
>
> I'm working my way through all the info you have provided and comments
> you have made to make sense of the setup on our network.
>
> It appears that there is no CA server on our network as every server
> that I go on does not have the CA authority service installed. In
> terms of the "http path" in the details tab of the certificate details
> described in an earlier post, all the servers that have certificates
> point to one particular server...but this server does not have CA
> installed. Also, when i go into sites and services, enable "services
> node" (thx didn't even know about this!) and drill down this is what i
> see:-
>
> NAME TYPE
> namedCA certification authority
>
> and that's all
>
> Now this would be great if "namedCA" ["named" is actually our company
> name but I've removed it for the post] was actually a server but it's
> not.What it is though is the same name that all the certificates that
> these domain controllers have (could just be chance - ie same naming
> convention). I was kinda expecting to see the name of the server that
> was being used as the CA server or nothing
> at all so was suprised to see this there.
> Properties of this object give no details at all.
>
> Any suggestions?
>
> Ta.
- Next message: Steven L Umbach: "Re: exposing TS directly to Internet"
- Previous message: Sean: "RE: Subordinate CA"
- In reply to: T0GGLe: "Re: Enterprise Certificate Authority question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
