Using Subordinate CA's

From: Scotty (Scotty_at_discussions.microsoft.com)
Date: 01/28/05 

Date: Fri, 28 Jan 2005 09:05:03 -0800

At one of my locations I setup an Enterprise Root CA, then also at the same
location I set up a Enterprise Subordinate CA. When I request a new
certificate through the Snap-in, it request a certificate from my Root CA
instead of my subordinate CA. How can I force the computers to request from
the Subordinate CA?

Relevant Pages

  • Re: Win2003 PKI : Subordinate CA certificate parameter
    ... You need to change the CAPolicy.inf on the subordinate CA. CAPolicy.inf is used during the enrollment process and the request and its contents depends on the file. ... the request already contains key usage 0x86 described as above and the root CA is issuing a certificate based on that request. ...
    (microsoft.public.windows.server.security)
  • SSL
    ... My company has an Enterprise Root CA in Colorado and many Subordinate CA in ... This office was able to set up a certificate on the OWA ... certificate for the external OWA access? ... should I install a new Enterprise root CA on the domain of this ...
    (microsoft.public.inetserver.iis.security)
  • Subordinate CA
    ... My company has an Enterprise Root CA in Colorado and many Subordinate CA in ... This office was able to set up a certificate on the OWA ... certificate for the external OWA access? ... should I install a new Enterprise root CA on the domain of this ...
    (microsoft.public.win2000.security)
  • Re: Standalone Subordinate Certificate Server Problems
    ... can you reply by pasting in the sample request in a newsgroup posting so ... Standalone Subordinate Certificate Server Problems ... > error code 1210, that would be helpful. ...
    (microsoft.public.win2000.security)
  • Certificate Server
    ... not you've installed a root CA or a subordinate CA. I'm ... certificate installed so that the services will operate ... certificate request for the CA. ... certificate and install that on the macine. ...
    (microsoft.public.win2000.security)