Re: Request a domain controller certificate

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 11/11/04 

Date: Thu, 11 Nov 2004 05:56:18 -0800

this last article has the step by step procedures to request an offline
domain controller certificate:

advanced certificate enrollment:
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Lorenzo Soncini" <lorenzo_soncini_technoservice_com> wrote in message 
news:%235N4t59xEHA.3168@TK2MSFTNGP15.phx.gbl...
> Hi have read the document...my problem is:
> how I can make the request for a domain controller certificate?
>
> Which consolle I need to use? I have tryed the Certificates snap-in for 
> the computer account but
> I can only see the certificate and don't request it
>
> Thanks for any help
> Lorenzo Soncini
>
> "David Cross [MS]" <dcross@online.microsoft.com> ha scritto nel messaggio 
> news:e2xx5byxEHA.2996@TK2MSFTNGP10.phx.gbl...
>> These three articles should help get you going in the right direction:
>>
>>
>> ·         Guidelines for Enabling Smart Card Logon with Third-Party 
>> Certification Authorities (Q281245): 
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281245
>> ·         Requirements for Domain Controller Certificates from a 
>> Third-Party CA (Q291010): 
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;Q291010
>>
>> ·         How to Import a Third-Party Certificate into the NTAuth Store 
>> (Q295663): 
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q295663
>>
>>
>>
>> advanced certificate enrollment: 
>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx
>>
>> -- 
>>
>>
>> David B. Cross [MS]
>>
>> --
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>>
>> http://support.microsoft.com
>>
>> "Lorenzo Soncini" <LorenzoSoncini@discussions.microsoft.com> wrote in 
>> message news:4C7DC3AD-A2D7-4A6A-AFD6-9D583457449E@microsoft.com...
>>> Hi folks,
>>> i follow my post of 10/29/2004 with this question:
>>> I need logon using smart card with a certificare released by a third 
>>> party CA.
>>> How I can make a request for a Domain controller certificate?
>>>
>>> Thanks for any help
>>> Lorenzo Soncini
>>
>>
>
>

Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: Cannot request computer certificate.
    ... request a computer certificate for about 9 months. ... and verify that you can get a computer/server certificate from it. ... List of NetBt transports currently bound to the Redir ... DNS Host Name: srvr3.domain.com ...
    (microsoft.public.windows.server.security)
  • RE: SIMple SSL question ??
    ... OK - i would also delete a cert request file lying around. ... But a certificate is a pub key + extra info. ... That said - if someone compromises the server he will also find a way to retrieve the private key. ... traffic between the initial web server and the client. ...
    (microsoft.public.dotnet.security)
  • Re: how can we restrict what certificate WSE will use?
    ... the valid x509 certificate which is used to identify him'. ... X509SecurityTokenManager to verify the request is from a trusted client. ... the problem is that he can not passed the authentication (suppose we ... > decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Web Certificate Enrollment security problem
    ... Enrollment works only with the NetBIOS Name and not with the FQDN. ... Svyatoslav Pidgorny, MS MVP - Security, MCSE ... access auditing and logging "issue and manage certificate requests" on ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)
Quantcast