Re: Deploy Root CA to 98
From: Brian Komar (bkomar_at_nospam.identit.ca)
Date: 08/19/05
- Next message: KRM1254: "Controlling access through a remote access policy"
- Previous message: Brian Komar: "Re: How to set up Kerberos authentication? (some code :)"
- In reply to: J. Smith: "Deploy Root CA to 98"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 19 Aug 2005 06:39:12 -0500
In article <#K5TA51oFHA.3084@TK2MSFTNGP09.phx.gbl>,
jdsms@tribalsimba.net says...
> We have a few 98 machines left, and after implementing our first ever Root
> CA in-house for secure and trusted application deployment is has been
> identified that the Root CA certificate needs to be deployed to these few 98
> machines in addition to our mainstream XP environment.
>
> Ideally I was hoping there was a command line utility like
> "certutil -installCert" on XP, so I could deploy with a simple addition to
> my logon script. Unable to locate a similar command line tool for 98, I was
> hoping one was deployed with Internet Explorer 6.0, but apparently not, as I
> am still running into a brick wall.
>
> Does anyone have any ideas on how to deploy (install) a certificate
> transparently on client Windows 98 computer in an Active Directory Networked
> environment. Group Policy is unable to manipulate 98 machines to my
> knowledge, so if there is a viable route there, I'm happy to explore it. It
> is how I currently deploy the CA to all my other systems.
>
> Thanks,
>
>
>
You could also use a capicom script to install the root as a trusted
root on the Windows 98 computer. There is a script named ctool.vbs on
the CD that accompanies my book that does this.
The Windows 98 client will also require the installation of CAPICOM to
be able to run the script, so as Steve stated, you may be better off
installing the certificate manually unless the WIndows 98 clients run a
logon script, allowing the automated installation of CAPICOM.
Brian
Microsoft® Windows Server=3F 2003 PKI and Certificate Security
http://www.microsoft.com/MSPress/books/6745.asp
-- == Brian Komar MVP - Windows - Security http://www.identit.ca/blogs/brian
- Next message: KRM1254: "Controlling access through a remote access policy"
- Previous message: Brian Komar: "Re: How to set up Kerberos authentication? (some code :)"
- In reply to: J. Smith: "Deploy Root CA to 98"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
