Certificate Services

  • Thread starter Thread starter jadubonl
  • Start date Start date
J

jadubonl

can windows server 2003 standard edition + sp2 certificate services work with
windows 2000 server + sp4 active directory ?
 
thank you very much.

just for the record: the certificate services component is on a testing and
development server, but the active directory is on a production server. the
component was installed like a standalone ca.

when all the testings are finished im going to install the certificate
services component on the windows 2000 server + sp4 active directory server
as an enterprise ca. the certificates will be valid for 5 years.

now the question.....

does all the above will create any type of problem on the network ?????

"Herb Martin" escribió:
 
jadubonl said:
thank you very much.

just for the record: the certificate services component is on a testing
and
development server, but the active directory is on a production server.
the
component was installed like a standalone ca.
Click to expand...

Then AD is irrelevant (i.e., standalone type CA.)
when all the testings are finished im going to install the certificate
services component on the windows 2000 server + sp4 active directory
server
as an enterprise ca.
Click to expand...

Well, actually you will be installing a new and different type so
your test will only be generally valid.
the certificates will be valid for 5 years.
Click to expand...

That is too long by most people's estimates.

Upgrade the 2000 server to 2003, and then you can shorten the
expiration AND use the "autorenewal" feature to get a reasonably
long certificate effective life.
now the question.....
does all the above will create any type of problem on the network ?????
Click to expand...

No.
 
In
jadubonl said:
thank you very much, again.
Click to expand...

If you will be using the autoenrollment feature and possibly need to create
custom certificate templates, then you will need Windows 2003 Enterprise.

Certificate Autoenrollment in Windows Server 2003:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations
 
normally yes.

However, if you want autoenrollment, v2 templates and some other stuff, you
need an enterprise CA. For an enterprise CA you need Windows Server 2003
ENTERPRISE.
The STANDARD will only support a stand alone CA

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
 
Back
Top