Re: EFS and Certificate Services

From: Brian Komar (bkomar_at_nospam.identit.ca)
Date: 08/25/05

  • Next message: jokes54321: "I need some tools, what's good??" 
    Date: Thu, 25 Aug 2005 15:59:28 -0500

    In article <13FC1DA3-FB08-4DEA-8384-D2DAF0D1DAF9@microsoft.com>,
    Rschraeger@discussions.microsoft.com says...
    > Paul,
    >
    > I appreaciate your concern for my training but I beleive that I have all the
    > training I need. I was only looking for clarification on a few items and for
    > some reason the Enterprise root CA slipped my mind a little.
    >
    > I think it is because I'm battleing this problem with multiple certificates
    > being issued. At this time I can reproduce the problem on a enterprise CA
    > (yes its online) issuing certs to clients. Yes I also know that Enterprise
    > CA's should not be issuing certs to clients. Again this is only testing.
    > Anyway the clients recieve multiple EFS certs from the CA. Looking at the
    > Certificate requests the clients is requesting a EFS cert...which the ca
    > gives to the clients then the client requests another.
    >
    >
    >
    Where are you seeing the second certificate, in the Certification
    Authority console or in the User's Certificate console.

    I am wondering whether the certificates are issued to the same user
    profile, or to multiple computers.

    Brian 

    -- 
==
Brian Komar
MVP - Windows - Security
http://www.identit.ca/blogs/brian
  • Next message: jokes54321: "I need some tools, what's good??"

    Relevant Pages

    • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
      ... > Failed to find running shell process ... >> It is possible that the crypto store has somehow been corrupted. ... >>> The MP is setup and thousands of other clients have access. ... >>> Failed to find the certificate in the store, ...
      (microsoft.public.sms.admin)
    • Re: Dummies Guide for RADIUS/Certs
      ... I have set up IAS. ... client computers impacts certificate enrollment. ... configure Group Policy for domain member wireless clients so ... Cert Templates that is now enrolled on the IAS server. ...
      (microsoft.public.internet.radius)
    • Re: Need help badly!!! Please....
      ... ccmdelcert is what you need for the certificate error below. ... > I have also run ccmclean on one of the clients, ... > Failed to find the certificate in the store, retry 1. ... >> The software inventory problem is a different one than the certificate ...
      (microsoft.public.sms.admin)
    • Re: Can this be done? Wireless Access w/o the use if CERTs
      ... a default certificate is being sent to user ... Could not retrieve the Remote Access Server's certificate due to the ... to use EAP-TLS but you don't have a server certificate. ... EAP-TLS requires certificates on clients and on the IAS server. ...
      (microsoft.public.internet.radius)
    • Re: trouble using SSL on WSUS
      ... clients according to the deployment guide. ... I configured the client to use the WSUS server through https. ... Schemes used: ... I've read on serveral sites that the server certificate has to be imported ...
      (Focus-Microsoft)