Re: PKI Certificate request from another forest

In article <#UzVljF2GHA.3476@xxxxxxxxxxxxxxxxxxxx>, neo@xxxxxxxxxxxxxxx says...
Best guess based on googling... the certreq.exe tool. (e.g. on the IIS
webserver, create the request via IIS managment snapin and save to file.
Copy the *.req file to the CA and use the certreq tool to submit it.)

"chriss3 [MVP]" <nospamhere_chrisse@xxxxxxxxxx> wrote in message
news:40564186-C69E-4166-A6F4-BB35DF2B83AA@xxxxxxxxxxxxxxxx
Hello,
Is there anyway to issue certificates to an IIS webserver that belongs to
another Active Directory Forest than the Enterprise Root CA i'm trying to
issue the certificate from. I tried to prepare a certificate request, but
when i'm trying to import the request file i get an error message saying
that the request dosen't contain any certificate template. Note: I don't
have the IIS Web-Based enrollment installed since i want to avoid install
IIS on the CA Server since it also a DC.

Any suggestions on this issue?

Thanks
Christoffer



Also, reconsider cohosting a CA and DC. The WEB interface makes life a lot easier> Also, most
companies run into trouble down the road when they co-host a CA and DC, as it makes it very
difficult to decommision (you cannot demote the DC, nor move certificate services to a
different computer).
Brian
.

Relevant Pages

  • Re: CSR - Wont process pending request
    ... certificate in IIS following the same steps I had been using. ... changed on my end however I was able to add the certificate and now it works. ... I created a new request to see if that would create a pending requests node ... matched to a pending request and the wizard will fail. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Certificate Woes - Problem with CA
    ... referring to submitting the request to an online CA by using IIS. ... I can request the certificate just fine using IIS. ... Template choices. ...
    (microsoft.public.windows.server.general)
  • Re: Page Cannot Be Displayed Errors
    ... I have remote access to the server through Remote Desktop, ... Where can I get the IIS 6.0 Resource Kit, and how do I use WFetch? ... following through with the request, ... > It sounds like you are quite close to the webserver. ...
    (microsoft.public.inetserver.iis)
  • Re: cs-host, host header and destination
    ... That is simply not important for the webserver. ... The request got there, and ... Use Host Header Names to Configure Multiple Web Sites in Internet ... Kristofer Gafvert - IIS MVP ...
    (microsoft.public.inetserver.iis)
  • RE: Certificate Woes - Problem with CA
    ... I can request the certificate just fine using IIS. ... I submit the Certificate request to the certificate server. ... Template choices. ...
    (microsoft.public.windows.server.general)