Re: Issuing of server/client authentication certs from an Ent. CA running on W2k3 Standard Edition

Ah, thanks for the tips Brian. Its great for those in the domain.

But I suspect the MMC approach won't be applicable for our few other machines that are non-domain joined. I'm currently trying to understand how to use certreq utility to make this work. Hmn..

Cheers.

"Brian Komar" <bkomarr@xxxxxxxxxxxxxxxxx> wrote in message news:v7z9fvfodb36.11ds8oh4tdbt7$.dlg@xxxxxxxxxxxxx
On Mon, 14 May 2007 14:43:25 +0800, Jeanne wrote:

Hi all,
Just a quick question: Our Enterprise Root CA in our AD forest is running on
a DC on a Win2003 Standard Edition box. I read that a standard edition W2k3
can only issue "Version 1" of security templates?

Not sure if its any issue but if we want to obtain Windows Computer
Certificates for client/server authentication (OID: 1.3.6.1.5.5.7.3.1 and
....3.2) purposes from this CA, is it possible? The web interface of an
Enterprise CA don't give us the option to pick a "computer" certificate
template. Must we absolutely need to setup an Win2k3 Enterprise edition
based CA for this?

A little confused. Need some quick pointer/light...

Many thanks all.
Cheers.

It can issue the Computer certificate template. You just need to use the
correct resources. Do not use the Web page, as the request is in the
security context of the user.
Instead, open a new MMC, add the Certificates console and focus on the
Local Machine (you must be a member of the local Administrators).

You can then request the Computer certificate
Brian

.

Relevant Pages

  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.win2000.windows_update)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.windowsupdate)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.security)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.win2000.security)
  • Re: How to fix broken security in Windows 2000?
    ... LOTS of security certificates and LOTS of files. ... I did manage to test a number of additional machines, ... every Windows XP machine is okay. ... but that some machines are missing more certificates ...
    (microsoft.public.win2000.windows_update)