Certificate Services


J

Justin Miller

I am setting up Cert Services in Win2K to issue my certs
for all my intranet sites. Just wondering if it's
possible for me to setup cert services to be subordinate
to some other trusted root CA (i.e. Verisign) so that I
don't have to add my private CA to the browser list? If
this is possible, how do I request this from the CA? I
have asked the nice people at GEOTRUST but I get no
response.
 
Ad

Advertisements

S

Shawn Rabourn \(MS\)

Yes it is possible, however if you are in a domain and use an Enterprise
Root CA, the Root CA certificate will come down automatically.


--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.
 
J

justin miller

it's not in a domain, just a stand-alone certificate
server that i want to issue certs with. geotrust just
emailed me back telling me this isn't possible. are they
correct?
 
S

Shawn Rabourn \(MS\)

I can't comment on whether or not you can subordinate under geotrust,
however I do know it is possible for a Microsoft CA to subordinate under a
different company's CA, I cannot comment on the actual companies.

You can push a Standalone root CA cert down by group policy.


--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.
 
Ad

Advertisements

D

David Cross [MS]

Technically it is possible - Geotrust would just sign your subordinate CA
request with their root. Verisign and Baltimore both offer this service.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top