MS Certification Authority

[James Fabulous]

Can anyone tell me if it's possible to modify the Code Signing certificate
template that Microsoft includes as part of the MS Certificate Authority to
auto-enroll like you can do with user certificates.

Background: We are using enterprise wide code signing certificates along
with very high security for macro's in office (MSExcel) documents.
Currently users are self-signing, I have tested using enterprise code
signing certificates but would like to reduce the amount of user
intervention by setting up auto-enrollment so that when users log into the
domain they automatically obtain a code signing certificate for those
purposes.

Thanks!

 

[David Cross [MS]]

Yes you can with Windows Server 2003 Enterprise Edition.



Windows Server 2003 certificate templates whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx



--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx

 

[James Fabulous]

Unfortunately I am using Win2k3 standard and not enterprise.

Thanks David!

Yes you can with Windows Server 2003 Enterprise Edition.



Windows Server 2003 certificate templates whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx



--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx

Can anyone tell me if it's possible to modify the Code Signing certificate
template that Microsoft includes as part of the MS Certificate Authority
to
auto-enroll like you can do with user certificates.

Background: We are using enterprise wide code signing certificates along
with very high security for macro's in office (MSExcel) documents.
Currently users are self-signing, I have tested using enterprise code
signing certificates but would like to reduce the amount of user
intervention by setting up auto-enrollment so that when users log into the
domain they automatically obtain a code signing certificate for those
purposes.

Thanks!

 

[David Cross [MS]]

You would have to upgrade for that functionality unfortunately.

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx

Unfortunately I am using Win2k3 standard and not enterprise.

Thanks David!

Yes you can with Windows Server 2003 Enterprise Edition.



Windows Server 2003 certificate templates whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx



--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx

Can anyone tell me if it's possible to modify the Code Signing certificate
template that Microsoft includes as part of the MS Certificate
Authority
to
auto-enroll like you can do with user certificates.

Background: We are using enterprise wide code signing certificates
along
with very high security for macro's in office (MSExcel) documents.
Currently users are self-signing, I have tested using enterprise code
signing certificates but would like to reduce the amount of user
intervention by setting up auto-enrollment so that when users log into the
domain they automatically obtain a code signing certificate for those
purposes.

Thanks!