Re: PKI. Why not standard edition

From: Brian Komar (bkomar_at_nospam.identit.ca)
Date: 08/25/05 

Date: Wed, 24 Aug 2005 18:10:30 -0500

In article <1124914752.631885.295500@g49g2000cwa.googlegroups.com>,
barabba72@hotmail.com says...
> It seems I need to use 2K3 Ent Ed in order to run an enteprise pki. Why
> is Std Ed not recommended ? I couldn't find any more details about
> this.
>
> Thank you
>
>
Here is the short list of what is only available in Enterprise Edition
(or Data Center)
- issue certificates based on version 2 certificate templates
- key escrow
- enforce role separation
- issue certificates to users using autoenrollment

Check out the PKI Best Practices whitepaper available at
www.microsoft.com/pki for more details.

Brian 

-- 
==
Brian Komar
MVP - Windows - Security
http://www.identit.ca/blogs/brian

Relevant Pages

  • Re: Using Certificates with IPSEC
    ... Make sure the certs are machine certs and not user certs. ... "Brian Komar" wrote in message ... >>> same root CA, or to CAs that are trusted by the opposite endpoint. ... > 1) You have to deploy the certificates to the two endpoint computers ...
    (microsoft.public.win2000.security)
  • Re: Certificates are not published
    ... Brian Komar wrote: ... > certificates in Active Directory of trusted domain ...
    (microsoft.public.windows.server.security)
  • Re: Using Certificates with IPSEC
    ... What is the process of trusting other computers for IPSEC using Certificates? ... "Brian Komar" wrote: ...
    (microsoft.public.win2000.security)