I hope the Windows server Gurus here will be able to help me.
We have a windows 2000 AD structure. Certificate authority has been
installed on one of the Domain controller, and its working fine.
Recently I added a surbordinate CA runing on Windows 2003 server (Not a
domain controller) but in a child domain.
If users request Certificates via MMC certificate snap in, they are
issued with a certificate from the ROOT. If they tick the advance box
during request, they can browse and select the subordinate CA, and the
certificate is issued by the subordinate.
When requests are made via webenrollment via http://subordinateCA/certsrv, certificates are issued correctly from
subordinate CA.
What we want is that users and computers on the Child Domain get thier
certificates automatically from the Subordinate CA without having to
tick the advance box when requesting certicates.
Re: Win2003 PKI : Subordinate CA certificate parameter ... You need to change the CAPolicy.inf on the subordinate CA. CAPolicy.inf is used during the enrollment process and the request and its contents depends on the file. ... the request already contains key usage 0x86 described as above and the root CA is issuing a certificate based on that request. ... (microsoft.public.windows.server.security)
RE: updates after format ... if the Microsoft Server is down. ... software you are installing has not passed Windows Logo testing verify its ... When you try to download an ActiveX control, install an update to Windows ... and you do not have the appropriate certificate in your Trusted Publishers ... (microsoft.public.windows.mediacenter)
Re: Need help configuring Wireless Connection profile ... and I can only use the intel OR windows utility, not both at the same time. ...Windows authentication for all users,4129,LRG\ryanv,4149,Wireless WPA2 ... SMALL BUSINESS SERVER:... STEP #1 Install Certificate Services... (microsoft.public.windowsxp.general)
Re: Cannot request computer certificate. ... you are using Windows 2003 see if there is any info in failed requests. ... I would run the support tool netdiag on your domain controller [at least ... I need to request a computer certificate for VPN server. ... (microsoft.public.windows.server.security)
Re: Auto certificate and key generation to pfx ... Best Practices for implementing Windows Server 2003 PKI: ...Troubleshooting Certificate Status and Revocation whitepaper: ... Regarding the certificate request:... (microsoft.public.platformsdk.security)
