Click here to get back home

Certificate Template Name: CA

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Certificate Template Name: CA sf 10-20-2005
Posted by sf on October 20, 2005, 8:35 pm
Please log in for more thread options
Hi,

I'm trying to configure a Enterprise Certificate authority (Windows
Server 2003, Enterprise Edition) and need to customize the root
certificate. I'm aware that I can set certain
parameters in capolicy.inf.
I'd like to remove "Certificate Template Name: CA" from root
certificate, how do I do this?

Many thanks in advance for any help.



Posted by Paul Adare on October 21, 2005, 3:13 am
Please log in for more thread options
the microsoft.public.windows.server.security news group, sf

> I'm trying to configure a Enterprise Certificate authority (Windows
> Server 2003, Enterprise Edition) and need to customize the root
> certificate. I'm aware that I can set certain
> parameters in capolicy.inf.
> I'd like to remove "Certificate Template Name: CA" from root
> certificate, how do I do this?
>

I don't believe that is possible for a root certificate. To disable
certificate extensions you need to set a registry entry which then
affects certificates that are issued by that CA. Since Certificate
Services aren't installed yet for a root, this obviously won't work.
What's the driver for wanting this change?
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea


Posted by sf on October 21, 2005, 1:17 am
Please log in for more thread options
Our company has decided to deploy a Windows Server 2003 PKI hierarchy
and we need to have root certificate without "Certificate Template
Name" extension.



Posted by Paul Adare on October 21, 2005, 4:36 am
Please log in for more thread options
the microsoft.public.windows.server.security news group, sf

> Our company has decided to deploy a Windows Server 2003 PKI hierarchy
> and we need to have root certificate without "Certificate Template
> Name" extension.

You haven't answered my question. Why do you feel that you need to
remove that extension?

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea


Similar ThreadsPosted
Restrict AD-User to one X509 Certificate per Certificate template? July 12, 2007, 12:18 pm
New Certificate Template Missing February 1, 2006, 12:09 pm
Can't enable Certificate Template??? May 25, 2006, 5:03 pm
Help issuing computer certificate template not available? March 7, 2006, 4:32 pm
Enable the created certificate Template June 18, 2007, 11:55 am
Publish duplicate Certificate template October 4, 2007, 10:15 am
CA certificate template custom subject name format January 9, 2007, 1:49 pm
CA certificate template custom subject name format January 16, 2007, 12:11 am
Certificate Enrollment w Firefox and Custom Template February 21, 2007, 8:03 pm
Hepl about new ADM template June 16, 2005, 1:16 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap