Click here to get back home

Is a CA mandatory in AD

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Is a CA mandatory in AD MNews 05-29-2008
Posted by MNews on May 29, 2008, 10:50 pm
Please log in for more thread options
Hi all
I am setting up a test domain and of about 30 users all one site. During
our research I was reading about Certificate Authority servers. Is this
something that is added by default when you install AD? If not, under
what circumstances should a domain have a there own CA? Should the CA be
on a DC?

Thanks for your advice

Carl




Posted by Steve Riley [MSFT] on May 30, 2008, 12:49 am
Please log in for more thread options
The answer to this is will you be setting up any services that require
certificates for authentication? For example, wireless networking, IPsec,
S/MIME (email signing and encryption)? If so, then you'll need a CA.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



> Hi all
> I am setting up a test domain and of about 30 users all one site. During
> our research I was reading about Certificate Authority servers. Is this
> something that is added by default when you install AD? If not, under
> what circumstances should a domain have a there own CA? Should the CA be
> on a DC?
>
> Thanks for your advice
>
> Carl
>
>
>

Posted by S. Pidgorny on June 1, 2008, 5:39 am
Please log in for more thread options
1. No.
2. If you have requirements for a CA and an external CA cannot meet all the
requirements i.e. cost
3. No.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Hi all
> I am setting up a test domain and of about 30 users all one site. During
> our research I was reading about Certificate Authority servers. Is this
> something that is added by default when you install AD? If not, under
> what circumstances should a domain have a there own CA? Should the CA be
> on a DC?
>
> Thanks for your advice
>
> Carl
>
>
>



Similar ThreadsPosted
mandatory filesystem ACLs March 9, 2007, 4:14 pm
Delete cached local copy of mandatory profile and non roaming domain user profiles ? May 1, 2008, 5:50 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap