ANOTHER ROOT CA?


From: "Mr Durand" <ddurand@xxxxxxxxxxxx>
Subject: Re: ANOTHER ROOT CA?
Date: Tuesday, January 03, 2006 11:39 PM

I am still without an answer here...do I really need to cough up $245 to get
an answer?

This is causing issues on some of my systems and may explain why I have
simple things not working properly.

I'm only wondering what may have happened to cause this to occur.


"Mr Durand" <eldocomp@xxxxxxxxx> wrote in message
news:emeD$j0$FHA.1124@xxxxxxxxxxxxxxxxxxxxxxx
>I have a simple single forest, single domain setup with 15 servers, 3 of
>which are domain controllers which carry the global catalog role as well.
>Recently I upgraded my Exchange Server and moved some web sites around that
>I use SSL communication with and to my surprise, here in December mind you,
>I discovered that back in July my CA authority generated a new RootCA. I'm
>trying to figure out why/how this happened as there were no changes made to
>the orgranization at that time and the original RootCA was not going to
>expire until the year 2013.
>
> Now it appears I have some signed by the new and some signed by the
> original and I guess I don't care which one is used as long as I can get
> the old certificates resigned by the new RootCA, etc. More importantly I
> would like to understand why this happened in the first place. Can
> someone shed some light on what events would cause this to happen? In
> October I set up a subordinate CA server and in November I actually ran an
> in-place upgrade on the DC that houses the RootCA to upgrade the system
> hardware and yet there is no correlation to a new RootCA being generated
> in July.
>
> Is there a good white paper or publication that helps with certificate
> creation, maintenance, etc. with Windows 2003 that I could use as an
> ongoing reference?
>
> Mr Durand
>



.

Relevant Pages

  • ANOTHER ROOT CA?
    ... I have a simple single forest, single domain setup with 15 servers, 3 of ... I discovered that back in July my CA authority generated a new RootCA. ... subordinate CA server and in November I actually ran an in-place upgrade on ...
    (microsoft.public.windows.server.security)
  • Re: ANOTHER ROOT CA?
    ... >Recently I upgraded my Exchange Server and moved some web sites around that ... >I discovered that back in July my CA authority generated a new RootCA. ... >the orgranization at that time and the original RootCA was not going to ... > in-place upgrade on the DC that houses the RootCA to upgrade the system ...
    (microsoft.public.windows.server.security)
Quantcast