Click here to get back home

Good approach for certificates?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Good approach for certificates? Ted 01-30-2007
Posted by Ted on January 30, 2007, 7:05 am
Please log in for more thread options
We have a web site and an extranet site:
www.ourcompany.com
sales.ourcompany.com

We are today using a self-signed certificate on the sales site. Now we want
to purchase a "real" one so our employees don't have to configure anything
when working from their home location. Also in the future we might want to
use SSL for other web servers as well.

Q:
Is the correct approach to buy a certificate for ourcompany.com, install an
enterprise CA in our domain and get a certificate for sales.ourcompany.com
from that CA? Or maybe there is an easier way? I'm new to this. Maybe we
should just get one for sales and then buy new ones for future subdomains?

TIA
/ Ted



Posted by Anthony on January 30, 2007, 1:42 pm
Please log in for more thread options
You need to buy a certificate specifically for sales.ourcompany.com. You can
buy a basic certificate from Thawte. As it's an extranet you don't need the
added endorsement of a Verisign certificate.
If you plan to run several websites from the same server you could buy a
wildcard certificate, *.ourcompany.com, but it's not cheap.
Anthony
www.airdesk.co.uk



> We have a web site and an extranet site:
> www.ourcompany.com
> sales.ourcompany.com
>
> We are today using a self-signed certificate on the sales site. Now we
> want to purchase a "real" one so our employees don't have to configure
> anything when working from their home location. Also in the future we
> might want to use SSL for other web servers as well.
>
> Q:
> Is the correct approach to buy a certificate for ourcompany.com, install
> an enterprise CA in our domain and get a certificate for
> sales.ourcompany.com from that CA? Or maybe there is an easier way? I'm
> new to this. Maybe we should just get one for sales and then buy new ones
> for future subdomains?
>
> TIA
> / Ted
>
>



Similar ThreadsPosted
Is TrueCrypt good? August 15, 2006, 2:26 pm
FileSystemAuditing doesn't work good October 17, 2006, 8:34 am
Recommendation for a good two-factor authentication product July 25, 2007, 6:58 pm
Please recommend good basic Win Server 2003 R2 security book(s) February 16, 2008, 12:38 pm
Certificates April 5, 2007, 5:38 pm
two CA certificates for IPSec or something... September 17, 2005, 3:58 pm
Certificates are not published October 17, 2005, 3:31 pm
Certificates 802.1X Auth. November 21, 2005, 11:07 am
Removing CA certificates. December 22, 2005, 3:50 pm
Need some information about certificates March 9, 2006, 5:54 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap