Where to run the Certificate Services to be an Enterprise CA



Hi,

We have Windows 2000 Domain controllers, file servers, and a Web server.
a couple Windows 2003 Network Appliances,
a Windows 2003 Web server running Windows Sharepoint Services and Project Server,
a Windows 2003 ISA Server.

I'm running into an issue where https:// to http:// bridging is not totally working with ISA sharepoint site publishing.
The failure I believe is in the the PDS (Project Data Service- soap xml) which streams data to activex chart controls that
make up most of the usefull information in Project Web Access. I wanted to try to set up
an internal CA to generate the certificates needed for Internal https:// so then I don't
have to change protocols from https:// to http:// but I don't know what server to put Certificate
Services on OR if it should be Enterprise Root CA or Stand Alone CA..
I'm concerned about the self registering certificate functionality and the PKI implications in mixed mode,
now and in the future, We don't have any complex PKI requirements now but as the documentation says you can't evolve this over time
organically, it's an architectural plan, which does not exist here.

Disclaimer
:We have zero insight, vision or education, stuck with the old idea of networks as Windows shares and
security as firewall port opening and blocking.

--
"it's definitely useless and maybe harmful".


.



Relevant Pages

  • SecurityFocus Microsoft Newsletter #154
    ... MICROSOFT VULNERABILITY SUMMARY ... ISS RealSecure Server Sensor SSL Denial Of Service Vulnerabi... ... Roger Wilco Remote Server Side Buffer Overrun Vulnerability ... available for Microsoft Windows operating systems. ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #49
    ... Subject: SecurityFocus Microsoft Newsletter #49 ... Microsoft Windows NNTP Denial of Service Vulnerability ... Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability ... Microsoft ISA Server H.323 Memory Leak Denial of Service... ...
    (Focus-Microsoft)
  • Questions Relating to Administering Windows 2000 Server
    ... installed the network client on the target computer. ... Sarah has been attempting to install Windows 2000 ... Server for two days. ... Sarah has checked the cables and hard drives. ...
    (microsoft.public.cert.exam.mcse)
  • pqv¼Ò¹ÚÇÑ ²Þ@mBGRx
    ... O-009¹Ù¢Ã MS Windows 2000 Datacenter Server -2¸¸¿ø ... Main Application (Borland C++ Builder 6 Enterprise Edition) ... Y-166¢Ã Sex Starved Sluts 1 (Divx) ...
    (FreeBSD-Security)
  • Questions Relating to Administering Windows 2000 Server
    ... installed the network client on the target computer. ... Sarah has been attempting to install Windows 2000 ... Server for two days. ... Sarah has checked the cables and hard drives. ...
    (microsoft.public.cert.exam.mcse)