RE: Using Subordinate CA's

From: Brian Komar (bkomar_at_nospam.identit.ca)
Date: 01/28/05

  • Next message: Brian Komar: "Re: Using Certificates with IPSEC" 
    Date: Fri, 28 Jan 2005 16:07:19 -0600

    In article <1544FE32-A2BD-4E9A-9BC9-575EAE660F2B@microsoft.com>,
    Scotty@discussions.microsoft.com says...
    > I am running Windows 2000 Server.

    If you are running Windows 2000 CAs, you can still use my script to
    request certificates for user certificates.

    Brian

    >
    > "Brian Komar" wrote:
    >
    > > In article <553FD614-C1BD-49C1-9E33-CEEA04749308@microsoft.com>,
    > > Scotty@discussions.microsoft.com says...
    > > > Wow. That was easy. Can computers be set up to request a certificate
    > > > automatically? I read where the GPO can be set up to where the computer
    > > > request a certificate for the PC, but what about User Certificates?
    > >
    > > If you are using the Windows Server 2003 enterprise CAs, running on
    > > Windows Server 2003, Enterprise Edition, you can enable autoenrollment
    > > for user through a combination of Version 2 certificate templates and
    > > Group Policy.
    > >
    > > The client computers *must* be running Windows XP.
    > >
    > > http://www.microsoft.com/technet/prodtechnol/windowsserver2003/plan/auto
    > > enro.asp
    > >
    > > Alternatively, I have included a vbs script in my book that allows you
    > > to perform scripted enrollment (automated enrollment) for user
    > > certificates on Windows 2000 clients with CAPICOM loaded.
    > >
    > > http://www.microsoft.com/MSPress/books/6745.asp
    > >
    > > Brian
    > >
    > > >
    > > > "Brian Komar" wrote:
    > > >
    > > > > In article <D9869C23-1A34-4C83-BE99-9EE4E35E3602@microsoft.com>,
    > > > > Scotty@discussions.microsoft.com says...
    > > > > > Sorry this is a duplicate of the thread above.
    > > > > >
    > > > > > "Scotty" wrote:
    > > > > >
    > > > > > > At one of my locations I setup an Enterprise Root CA, then also at the same
    > > > > > > location I set up a Enterprise Subordinate CA. When I request a new
    > > > > > > certificate through the Snap-in, it request a certificate from my Root CA
    > > > > > > instead of my subordinate CA. How can I force the computers to request from
    > > > > > > the Subordinate CA?
    > > > > >
    > > > > Do an advanced request. This allows you to choose which enterprise CA
    > > > > for the request submission
    > > > >
    > > > > Brian
    > > > >
    > > >
    > > R

  • Next message: Brian Komar: "Re: Using Certificates with IPSEC"

    Relevant Pages

    • Re: "pool" a tightly controlled set of Excel instances
      ... Brian, microsoft has acknowledged the problem, and provided ... an actX object to call the api, ... possibility, I suggest using DynaWrap, which will allow ... you to call api's from script. ...
      (microsoft.public.scripting.vbscript)
    • Re: Script errors in IE6
      ... > gave me for Windows Script 5.6 is for Windows 98 and I am running Windows ... Let me which one to download since I am running Windows XP SP2. ... >> any other programs that are capable of blocking pop-ups. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: Script Error
      ... Brian, Thank you for your responce, it is very helpfull, I am learning here ... with the script for Internet Exployer thanks to you. ... You are right about the restore point I should have thought about ...
      (microsoft.public.windowsxp.basics)
    • Re: [PHP] strange include path error
      ... On Wed, June 27, 2007 6:59 pm, brian wrote: ... Looking at the error log, i found that the DB connection script that's ... i recieved the mail after my client split for a long ...
      (php.general)
    • Is this a Scripting Problem?
      ... When I then Click on it, the status bar changes to 'DONE', and yet, ... its clear that the script did not ... general security set at 'Medium'. ... running Windows ME. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)