Re: ??'s about Certificates & AD

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 12/23/04


Date: Thu, 23 Dec 2004 05:25:27 -0800

Have the domain controllers automatically renewed their certificates?

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
<-> wrote in message news:OSEOufJ6EHA.1524@TK2MSFTNGP09.phx.gbl...
> Hello,
>
> Our certificate authority is going to expire in a few weeks and we are 
> trying to extend it in our pilot environment.  We use it to access our 
> Active Directory through SSL/ port 636.  We have already renewed the CA 
> and everything looks good on paper but the client machines keep getting an 
> error message saying that it's expired.
>
> How can one tell which certificate is being used and how can one tell 
> which certificate has been published to AD?
>
> Thanks
> 


Relevant Pages

  • Re: What to do with certificates when profile is deleted/recreated?
    ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... Windows Server 2003 web enrollment and troubleshooting guide: ... roaming user profiles ...
    (microsoft.public.windows.server.security)
  • Re: Auto-Enrollment of Certificates
    ... I am trying to add Certificate Template from Add Standalone Snap-In, ... > Best Practices for implementing Windows Server 2003 PKI: ... > Windows Server 2003 web enrollment and troubleshooting guide: ...
    (microsoft.public.platformsdk.security)
  • Re: Isolation of the Root CA
    ... Windows Server 2003 web enrollment and troubleshooting guide: ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... >>> standalone root CA and use it to issue a certificate for an Enterprise ...
    (microsoft.public.win2000.security)
  • Re: installing an offline root CA
    ... Windows Server 2003 PKI Operations Guide ... Managing a Windows Server 2003 Public Key Infrastructure ... Best Practices for Implementing a Microsoft Windows Server 2003 Public Key ... Implementing and Administering Certificate Templates in Windows Server 2003 ...
    (microsoft.public.security)
  • Re: Auto-Enrollment of Certificates
    ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... Windows Server 2003 web enrollment and troubleshooting guide: ...
    (microsoft.public.platformsdk.security)