Re: Certificate on Juniper's Steel Belted Radius Server

Brian,
Thank you for your patience. My problem is I can't figure out how to load
the "RAS and IAS Server" template. I need to get this template to my list of
CA templates otherwise the MMC console will not pick it up...right. There
must be something very simple that I'm not getting.
Thank you





"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message
news:MPG.20481403bb2f3a6498969d@xxxxxxxxxxxxxxxxxxxxxxx
In article <e0hCytuVHHA.1636@xxxxxxxxxxxxxxxxxxxx>, gel114
@theconnection.com says...
Brian,
You're right, I have Standard Edition. Am I sunk to issue the certificate
I
need.



"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message
news:MPG.2047e776f958f2eb98969b@xxxxxxxxxxxxxxxxxxxxxxx
The CA must be running on Windows Server 2003, Enterprise Edition to
issue version 2 certificate templates. You must be using Standard
Edition
Brian

In article <#cSZ23sVHHA.496@xxxxxxxxxxxxxxxxxxxx>, gel114
@theconnection.com says...
Brian,
One more thing. How do I get the changed template that is in the
"Certificate Templates" folder to the "Certificate Templates" folder
in
the
Certificate Authority folder. I can rt. click this later Certificate
Templates folder to add a template but I don't any templates that I
want
to
add. I've read many things about the certs, but I can't find this
info.


"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message
news:MPG.2046b999f10a8f1b989697@xxxxxxxxxxxxxxxxxxxxxxx
In article <#jZZBRiVHHA.4188@xxxxxxxxxxxxxxxxxxxx>,
gel114@xxxxxxxxxxxxxxxxx says...
Brian,
Thank you for the reply. I was using the web method because I can
then
export the private keys. But as you say I get a cert for the user
and
not
for the machine. Do I need to request the cert when I'm at the CA
server
and
then export it to the SBR server.

If you change the v2 template to provide the subject in
the request, you can use the Web enrollment. You must
enable the Use Local Machine store option, and provide
the subject (vpn.example.com).

Brian






If the computer is a domain member, you are not sunk.
1) Load the RAS and IAS Server certificate template at the CA
2) Load a blank MMC console
3) Load the Certificates console focused on the local machine (you must
be a local Administrator)
4) Use the wizard to request and install the RAS and IAS Server
certificate
Brian


.

Relevant Pages

  • Re: IAS certificate needs reloaded on DC every day
    ... This is the first thing I've seen or read that says the certificate for the ... IAS server needs to use the RAS and IAS template for setting up the wireless ... Using Group Policy, I opened the Default Domain Controller OU, then edit ...
    (microsoft.public.internet.radius)
  • Re: PKI: Issue Computer Certificate
    ... Server" certificate template and changed only the security settings so ... The IAS Server is a member of the mentioned group. ... Web Enrollment Page ("create an submit request to this ca") on the IAS ...
    (microsoft.public.windows.server.security)
  • Re: Requesting certificate from CA server : problem
    ... When trying to request a certificate from my IAS server, ... Is the IAS server a domain member server? ... the Cert Templates MMC snap-in, ... See the Help topic "Network access authentication and certificates" in ...
    (microsoft.public.internet.radius)
  • Re: Certificate on Junipers Steel Belted Radius Server
    ... Am I sunk to issue the certificate I ... Templates folder to add a template but I don't any templates that I want ... If the computer is a domain member, you are not sunk. ... Use the wizard to request and install the RAS and IAS Server ...
    (microsoft.public.windows.server.security)
  • RSA/IAS Zertifikats Vorlage
    ... Auf dem IAS Server muss ich ein Zertifikat der Vorlage "RAS and IAS ... "RAS and IAS Server" Certificate Template dupliziert ...
    (microsoft.public.de.german.isaserver)