Click here to get back home

Re: Main differences between Enterprise CA and Standalone CA ?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Re: Main differences between Enterprise CA and Standalone CA ? Paul Bergson [MVP-DS] 03-25-2008
Posted by Paul Bergson [MVP-DS] on March 25, 2008, 9:00 am
Please log in for more thread options
> Hi,
>
> one people in my team has made a project with a standalone CA but we are
> thinking about installing an Enterprise CA as we are using Active
> Directory.
>
> We don't have any special needs actually but the advantage to have the
> Enterprise CA is the auto-enrollment so we would like to install it for
> the project and not anymore the standalone CA.
>
> My question is, what differences should we have to know about the
> installation of an Enterprise CA in place of a Standalone CA ? (or more
> exactly what default options should I have to change on the Enterprise CA
> to work as if I was using a Standalone CA?)
>
> For example, I am thinking about changing the default value of
> autoenrollment in the Enterprise CA ( Policy Modules/Properties/Set the
> certificate request status to pending).
>
> But is there anything else ?
>
> Thank you
>
> --
> Pascal
>
>

This would be best asked and answered in the security newsgroup.

I can tell you though if you move your CA, you will break your trust and all
certs issued will no longer be trusted and have to be re-issued by the new
CA you create. So be aware of that.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.



Posted by Pascal on March 25, 2008, 9:34 am
Please log in for more thread options
Thank you Paul.

In our situation, no certificate has been delivered yet so no problem
for that.

We would like to know what are the differences (default settings)
between the enterprise and standalone CA.

Thanks
>> Hi,
>>
>> one people in my team has made a project with a standalone CA but we are
>> thinking about installing an Enterprise CA as we are using Active
>> Directory.
>>
>> We don't have any special needs actually but the advantage to have the
>> Enterprise CA is the auto-enrollment so we would like to install it for the
>> project and not anymore the standalone CA.
>>
>> My question is, what differences should we have to know about the
>> installation of an Enterprise CA in place of a Standalone CA ? (or more
>> exactly what default options should I have to change on the Enterprise CA
>> to work as if I was using a Standalone CA?)
>>
>> For example, I am thinking about changing the default value of
>> autoenrollment in the Enterprise CA ( Policy Modules/Properties/Set the
>> certificate request status to pending).
>>
>> But is there anything else ?
>>
>> Thank you
>>
>> -- Pascal
>>
>>
>
> This would be best asked and answered in the security newsgroup.
>
> I can tell you though if you move your CA, you will break your trust and all
> certs issued will no longer be trusted and have to be re-issued by the new CA
> you create. So be aware of that.

--
Pascal



Similar ThreadsPosted
Difference between Enterprise Sub CA and Standalone Sub CA March 22, 2006, 3:00 pm
Power Users & Servers - Windows 2000 & 2003 Differences December 7, 2006, 9:32 am
Main Administrator account doesn't have Administrator groups right March 1, 2006, 2:35 pm
Certificate templates with standalone CA October 7, 2005, 4:07 pm
Standalone CA won't generate .crt file February 20, 2006, 10:44 am
standalone CA - cannot use browser to install certs February 1, 2008, 4:15 pm
Moving Standalone CA from Windows 2000, to Windows 2008? March 31, 2008, 10:05 am
enterprise January 30, 2006, 1:46 am
Re: Two Enterprise CAs? July 19, 2007, 2:18 pm
Two Enterprise CAs? June 27, 2007, 11:18 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap