Re: Certificate on Juniper's Steel Belted Radius Server

In article <e0hCytuVHHA.1636@xxxxxxxxxxxxxxxxxxxx>, gel114
@theconnection.com says...
Brian,
You're right, I have Standard Edition. Am I sunk to issue the certificate I
need.



"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message
news:MPG.2047e776f958f2eb98969b@xxxxxxxxxxxxxxxxxxxxxxx
The CA must be running on Windows Server 2003, Enterprise Edition to
issue version 2 certificate templates. You must be using Standard
Edition
Brian

In article <#cSZ23sVHHA.496@xxxxxxxxxxxxxxxxxxxx>, gel114
@theconnection.com says...
Brian,
One more thing. How do I get the changed template that is in the
"Certificate Templates" folder to the "Certificate Templates" folder in
the
Certificate Authority folder. I can rt. click this later Certificate
Templates folder to add a template but I don't any templates that I want
to
add. I've read many things about the certs, but I can't find this info.


"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message
news:MPG.2046b999f10a8f1b989697@xxxxxxxxxxxxxxxxxxxxxxx
In article <#jZZBRiVHHA.4188@xxxxxxxxxxxxxxxxxxxx>,
gel114@xxxxxxxxxxxxxxxxx says...
Brian,
Thank you for the reply. I was using the web method because I can then
export the private keys. But as you say I get a cert for the user and
not
for the machine. Do I need to request the cert when I'm at the CA
server
and
then export it to the SBR server.

If you change the v2 template to provide the subject in
the request, you can use the Web enrollment. You must
enable the Use Local Machine store option, and provide
the subject (vpn.example.com).

Brian






If the computer is a domain member, you are not sunk.
1) Load the RAS and IAS Server certificate template at the CA
2) Load a blank MMC console
3) Load the Certificates console focused on the local machine (you must
be a local Administrator)
4) Use the wizard to request and install the RAS and IAS Server
certificate
Brian
.

Relevant Pages

  • RE: Certsrv and Autoenrollment problem
    ... Thank you for posting to the SBS Newsgroup. ... so it will not be instantiated on the template ... Certificate Authority snap-in will show the templates in the Certificate ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: IAS certificate needs reloaded on DC every day
    ... This is the first thing I've seen or read that says the certificate for the ... IAS server needs to use the RAS and IAS template for setting up the wireless ... Using Group Policy, I opened the Default Domain Controller OU, then edit ...
    (microsoft.public.internet.radius)
  • Re: PKI: Issue Computer Certificate
    ... Server" certificate template and changed only the security settings so ... The IAS Server is a member of the mentioned group. ... Web Enrollment Page ("create an submit request to this ca") on the IAS ...
    (microsoft.public.windows.server.security)
  • Re: Requesting certificate from CA server : problem
    ... When trying to request a certificate from my IAS server, ... Is the IAS server a domain member server? ... the Cert Templates MMC snap-in, ... See the Help topic "Network access authentication and certificates" in ...
    (microsoft.public.internet.radius)
  • Re: Problems requesting computer certificates on an issuing CA
    ... The exact permissions on my template are: ... I tried to manually enroll for a computer certificate based on ... CA allows the computers to request certificates. ...
    (microsoft.public.windows.server.security)