Re: Question regarding issuing certificates to users

How do you plan to issue the certificates to the users?
What you are telling me is how clients will find other users certificates (say for encryption certs).
How are *you* going to get a certificate issued by *your* CA to a user on your network.

- CertMgr
- Autoenrollment
- Web enrollment
- Face-to-Face meeting
- Use of a registration authority such as ILM
- Will the user have to undergo a vetting process to confirm their identity
- If they under go a vetting process, what forms of identification must be shown
- Will the identification be recorded.
- Who will perform the validation of identity
- How often will they have to renew the certificate

It really is a simple question
Brian

<snip>
===================================

Hi,

Could you please elaborate a little more on what you mean by "on how
you plan to deploy the certificates" ?

The setup is envisaged to be tied to our AD, and the AD going to be
our store for certificates.

.

Relevant Pages

  • Re: Woods Badge
    ... > Well they are validated because my TA has signed my plan, ... > Certificates, who sorts those out? ... This sums it up really the new system is a pile of bantha poo doo, ...
    (uk.rec.scouting)
  • Re: Question regarding issuing certificates to users
    ... It really depends on how you plan to deploy the certificates to answer your ... requirement is that if the user requests for an additional ... there any way such a policy could be configured? ...
    (microsoft.public.win2000.security)
  • Re: Where are the CA certificates in Solaris 10?
    ... to the CA certificates. ... I've found the openssl, apache, and apache2 directories, but the CA ... That's plan B. Plan A is to have the vendor maintain them. ...
    (comp.unix.solaris)
  • Re: Where are the CA certificates in Solaris 10?
    ... to the CA certificates. ... I've found the openssl, apache, and apache2 directories, but the CA ... That's plan B. Plan A is to have the vendor maintain them. ...
    (comp.unix.solaris)
  • Re: Certificate attributes for Smart Card Logon
    ... unfortunately, as far as I know if you have the "Secure Email" application Policy set, a certificate by default may not just be used for email signature but also email encryption! ... If you enable the Smart Card Logon, Client Authentication, and Secure Email application Policies, this ensure that the smart card cannot be used for actual encryption. ... My domain controllers each already have their own certificates. ...
    (microsoft.public.windows.server.security)