Re: Difference between 2003 edition for PKI functionnality

From: Shawn Corey [MSFT] (shawncor_at_online.microsoft.com)
Date: 10/28/03


Date: Mon, 27 Oct 2003 15:12:31 -0800

The Enterprise edition of Windows Server 2003 allows for the use of version
2 certificate templates for Enterprise CAs. V2 templates give you the
ability to edit and create new templates, the version 1 template which are
essentially what were present for Win2K are not editable. Being editable
allows for customizing things like CSP/key length, subject syntax, key
usage, EKU, etc. Pretty much everything about the template is editable. The
Enterprise edition also allows for auto-enrollment to Windows XP and greater
clients, this allows administrators to configure enrollment for certificates
for users on login with no or little user interaction. V2 template also
allow for customizing of the certificates the machines automatically enroll
for instead of being limited to the few non-editable templates that were
present on Win2k.

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Michel Lapointe" <a@a.com> wrote in message
news:udZXhvMnDHA.2424@TK2MSFTNGP10.phx.gbl...
> And what is include in the Extended certificate template?
>
> Thank
>
> ML
> "Laura A. Robinson" <firstinitiallastname@technologist.com> a écrit dans
le
> message de news:MPG.1a07489fb49d4f6a98a98a@msnews.microsoft.com...
> > circa Mon, 27 Oct 2003 15:01:49 -0500, in
> > microsoft.public.windows.server.security, Michel Lapointe (a@a.com)
> > said,
> > > Hello,
> > >
> > >     According to microsoft site, there is a difference at the
> functionnality
> > > level between the standard edition and the enterprise edition for the
> Public
> > > Key Infrastructure, Certificate Services, and Smart Cards services.
> > >
> > >     Does anyone know precisely what is the difference between the 2
> > > versions? The MS site is pretty vague on it.
> > >
> > > Thank
> > >
> > > Michel Lapointe
> > >
> > Extended certificate templates, although I was installing them on
> > Standard Edition up until nearly RTM. I've not tried since RTM, so
> > they may no longer be installable on Standard, but that was the
> > difference, IIRC.
> >
> > Laura
> > -- 
> > Outside of a dog, a book is your best friend, and inside a dog, it's
> > too dark to read.
> > -Groucho Marx
>
>


Relevant Pages

  • Re: Certificate Templates - Duplicating template - Issue does not work
    ... Rather than upgrade the OS for this service, can I create and import a V1 ... > templates you will have to run your CA server on Enterprise Edition. ... > Implementing and Administering Certificate Templates in Windows Server ...
    (microsoft.public.win2000.security)
  • Re: Certificate template modifying
    ... >certaing users to access only certain templates. ... >2003 Enterprise setup of Windows CA. ... >> Implementing and Administering Certificate Templates in Windows Server ...
    (microsoft.public.windows.server.security)
  • Re: Certificate Templates - Duplicating template - Issue does not work
    ... > I only need to make one variation of the web server cert. ... >> templates you will have to run your CA server on Enterprise Edition. ... >> Implementing and Administering Certificate Templates in Windows Server ...
    (microsoft.public.win2000.security)
  • Re: Windows 2003 Standard Edition (CA)
    ... Edition which I take it uses Version 1 cert templates, ... > Version 2 certificate templates can only be used to issue certificates on CA ... > Implementing and Administering Certificate Templates in Windows Server 2003 ...
    (microsoft.public.security)
  • Re: Help! Certificate Templates
    ... 2003 Enterprise Edition isn't required. ... What's New in Windows Server 2003 ... Version 2 Certificate Templates ...
    (microsoft.public.windows.server.security)