Re: how to make https

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 09/17/04

  • Next message: Fred Forsyth: "Running COM objects as Launching User win Win 2K3" 
    Date: Fri, 17 Sep 2004 09:42:18 +0200

    Hi Manoj,

    Yes, 3rd party certificates are payable. Prices range from about 150$ per
    year and more.

    CA server doesn't come with IIS (well it did in NT). Now it comes with
    either Windows 2000 or Windows 2003.

    Document will work for internal and external use. The reason I ask is none
    of external users (e.g. your customers) will not trust your internal
    certificates by default. If primary use is external (again I have your
    customers in mind) I usually recommend obtaining certificate from 3rd party
    trusted certificate authority. Among other this kind of solution is more
    professional towards the customer.

    If you decide and setup your own CA my recommendation is to use Windows 2003
    CA. Here are some additional resources you might want to use before you
    setup your CA server.

    Managing a Windows Server 2003 Public Key Infrastructure
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/mngpki.mspx

    Windows Server 2003 PKI Operations Guide
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx

    PKI Enhancements in Windows XP Professional and Windows Server 2003
    http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx

    Best Practices for Implementing a Microsoft Windows Server2003 Public Key
    Infrastructure
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

    Feel free to post back with any addition questions you might have.

    Mike

    "Manoj Menon" <it.ees@ltees.com> wrote in message
    news:1a7bbeae.0409162232.541c7511@posting.google.com...
    > Thanks Miha for your reply.
    > Well regarding the CA server, what do you recommend? I think 3rd
    > party Certificate Agency will be payable. So I think first I will go
    > for the free one...the Microsoft CA which is available free with IIS.
    > Is that OK??
    >
    > I want my site to be used in both way, through the web address(on
    > Internet) and the local IP(in Intranet or WAN). Will this document
    > work for both of them??
    >
    > Iam going through "How To Set Up SSL Using IIS 5.0 and Certificate
    > Server 2.0" and will get back to you soon.
    >
    > Thanks
    > Manoj

  • Next message: Fred Forsyth: "Running COM objects as Launching User win Win 2K3"

    Relevant Pages

    • Re: Need help configuring Wireless Connection profile
      ... and I can only use the intel OR windows utility, not both at the same time. ... Windows authentication for all users,4129,LRG\ryanv,4149,Wireless WPA2 ... SMALL BUSINESS SERVER: ... STEP #1 Install Certificate Services ...
      (microsoft.public.windowsxp.general)
    • Cannot sync Windows mobile with sbs2003 server
      ... Windows Mobile OS to the SBS2003 server at work so that he can read e-mails. ... What certificate do Microsoft recommend here, and where can this be bought? ...
      (microsoft.public.pocketpc)
    • Re: Need help configuring Wireless Connection profile
      ... Now life is good in the Windows wireless world. ... now have a secure wireless setup within my small business server environment. ... "point" the info of the Radius authentication to your current Radius server. ... STEP #1 Install Certificate Services ...
      (microsoft.public.windowsxp.general)
    • Re: EAP-TLS with windows CE
      ... credentials at the login prompt for Windows Server 2003 on the server ... The certificate is a public thing, ... When the server asks the Windows CE device to identify itself, ... I could easily steal your authentication information. ...
      (microsoft.public.windowsce.platbuilder)
    • Re: EAP-TLS with windows CE
      ... Thanks for the quick response. ... Windows CE then prompts the wireless user for the ... to the AP which gets passed on to an authentication server (RADIUS or ... nothing to do with the contents of the certificate at all. ...
      (microsoft.public.windowsce.platbuilder)
    • Quantcast