Re: MS Certification Authority

From: James Fabulous (James.Fabulous_at_hotmail.com)
Date: 03/16/05 

Date: Wed, 16 Mar 2005 08:24:37 -0700

Unfortunately I am using Win2k3 standard and not enterprise.

Thanks David!

"David Cross [MS]" <dcross@online.microsoft.com> wrote in message
news:OSe6pviKFHA.1948@TK2MSFTNGP14.phx.gbl...
> Yes you can with Windows Server 2003 Enterprise Edition.
>
>
>
> Windows Server 2003 certificate templates whitepaper:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx
>
>
>
> --
> David B. Cross [MS]
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> Top Whitepapers:
>
> Auto-enrollment whitepaper:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
>
> Best Practices for implementing Windows Server 2003 PKI:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
>
> Troubleshooting Certificate Status and Revocation whitepaper:
> http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
>
> Windows Server 2003 web enrollment and troubleshooting guide:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
> "James Fabulous" <James.Fabulous@hotmail.com> wrote in message
> news:u3aOUYMKFHA.3500@TK2MSFTNGP14.phx.gbl...
> > Can anyone tell me if it's possible to modify the Code Signing
certificate
> > template that Microsoft includes as part of the MS Certificate Authority
> > to
> > auto-enroll like you can do with user certificates.
> >
> > Background: We are using enterprise wide code signing certificates along
> > with very high security for macro's in office (MSExcel) documents.
> > Currently users are self-signing, I have tested using enterprise code
> > signing certificates but would like to reduce the amount of user
> > intervention by setting up auto-enrollment so that when users log into
the
> > domain they automatically obtain a code signing certificate for those
> > purposes.
> >
> > Thanks!
> >
> >
>
>

Relevant Pages

  • Re: What to do with certificates when profile is deleted/recreated?
    ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... Windows Server 2003 web enrollment and troubleshooting guide: ... roaming user profiles ...
    (microsoft.public.windows.server.security)
  • Re: Isolation of the Root CA
    ... Windows Server 2003 web enrollment and troubleshooting guide: ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... >>> standalone root CA and use it to issue a certificate for an Enterprise ...
    (microsoft.public.win2000.security)
  • Re: installing an offline root CA
    ... Windows Server 2003 PKI Operations Guide ... Managing a Windows Server 2003 Public Key Infrastructure ... Best Practices for Implementing a Microsoft Windows Server 2003 Public Key ... Implementing and Administering Certificate Templates in Windows Server 2003 ...
    (microsoft.public.security)
  • Re: Auto-Enrollment of Certificates
    ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... Windows Server 2003 web enrollment and troubleshooting guide: ...
    (microsoft.public.platformsdk.security)
  • Re: Certificates and templates
    ... You need to install the issuing CA as an enterprise CA running on Windows Server 2003, Enterprise Edition. ... I have duplicate the code signing template so I can customize some properties and use certificates with this template. ... The problem is when I try to add the certificate template in the Certification Authority so users can request certificates from this template, my created certificate template is not in the existing templates so nobody can request certificates from this template. ...
    (microsoft.public.win2000.security)