Windows server ca : certificate renewal

[laurent]

Hi,


I'm currently doing some tests on the Windows 2003 stand-alone
certification authority.
I installed it on a windows 2003 server and I use a windows 2000 pro
computer to send pkcs#10 requests...
I used the certificate enrollment web site (http://ca/certserv/) to ask
for ertificates and it works fine.
But when I try to send a pkcs#7 to renew a certificate that was just
generated it doesn't work.
I don't know exactly how to generate this pkcs#7 indeed I just exported
the pkcs#7 using the certificate snap-in and converted it in an encoded
base64 pkcs#7 using openssl. That doesn't seem right.
And on the ca server I don't know either how to renew a certificate.

Some ideas, to create this file using windows or to renew a certificate?

thanks,

laurent

ps:
Sorry to repost this one, but after seeing the post topic on the spam, I
decided to remove my former post and to put it with a new mail address
whether it's effective or not. perhaps I will be spammed on both mail
boxes?

 

[Laudon Williams [MSFT]]

Are you really wanting to recertify the existing key pair? If not, renewal
is simply submitting a new request.

 

[laurent]

Are you really wanting to recertify the existing key pair? If not, renewal
is simply submitting a new request.

I thought there was a way to generate a renewal request by using the
certificates snap-in which will enable to save certificate fields and
keep the keys for the new certificate. I thought it was the reason to
use the pkcs#7 file
I saw in the microsoft doc that you can use pkcs#7 to renew a
certificate but I didn't see how to generate this file.

Thanks for your reply,
laurent

 

[Laudon Williams [MSFT]]

Try this:
http://msdn.microsoft.com/library/d...rity/security/ienroll4_renewalcertificate.asp