MS Certification Authority

  • Thread starter Thread starter James Fabulous
  • Start date Start date
J

James Fabulous

Can anyone tell me if it's possible to modify the Code Signing certificate
template that Microsoft includes as part of the MS Certificate Authority to
auto-enroll like you can do with user certificates.

Background: We are using enterprise wide code signing certificates along
with very high security for macro's in office (MSExcel) documents.
Currently users are self-signing, I have tested using enterprise code
signing certificates but would like to reduce the amount of user
intervention by setting up auto-enrollment so that when users log into the
domain they automatically obtain a code signing certificate for those
purposes.

Thanks!
 
Yes you can with Windows Server 2003 Enterprise Edition.



Windows Server 2003 certificate templates whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx



--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
 
Unfortunately I am using Win2k3 standard and not enterprise.

Thanks David!

David Cross said:
Yes you can with Windows Server 2003 Enterprise Edition.



Windows Server 2003 certificate templates whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx



--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
James Fabulous said:
Can anyone tell me if it's possible to modify the Code Signing certificate
template that Microsoft includes as part of the MS Certificate Authority
to
auto-enroll like you can do with user certificates.

Background: We are using enterprise wide code signing certificates along
with very high security for macro's in office (MSExcel) documents.
Currently users are self-signing, I have tested using enterprise code
signing certificates but would like to reduce the amount of user
intervention by setting up auto-enrollment so that when users log into the
domain they automatically obtain a code signing certificate for those
purposes.

Thanks!
Click to expand...
Click to expand...
 
You would have to upgrade for that functionality unfortunately.

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
James Fabulous said:
Unfortunately I am using Win2k3 standard and not enterprise.

Thanks David!

David Cross said:
Yes you can with Windows Server 2003 Enterprise Edition.



Windows Server 2003 certificate templates whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03crtm.mspx



--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
James Fabulous said:
Can anyone tell me if it's possible to modify the Code Signing certificate
template that Microsoft includes as part of the MS Certificate
Authority
to
auto-enroll like you can do with user certificates.

Background: We are using enterprise wide code signing certificates
along
with very high security for macro's in office (MSExcel) documents.
Currently users are self-signing, I have tested using enterprise code
signing certificates but would like to reduce the amount of user
intervention by setting up auto-enrollment so that when users log into the
domain they automatically obtain a code signing certificate for those
purposes.

Thanks!
Click to expand...
Click to expand...
Click to expand...
 
Back
Top