Click here to get back home

Re: Subordinate CA server renewal with an online CA root server

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Re: Subordinate CA server renewal with an online CA root server Paul Bergson [MVP-DS] 07-17-2008
Posted by Paul Bergson [MVP-DS] on July 17, 2008, 8:48 am
Please log in for more thread options
>I have an Enterprise CA root server and a subordinate CA server in my
>domain
> (single domain). Both of these servers are running on Windows 2003
> Enterprise edition.
>
> I was able to obtain a subordinate CA certificate when i originally set it
> up (this original sub CA certificate will expire on 2/2009). Now i would
> like to renew my subordinate CA's so the expiration date will be further
> out
> (e.g. to year 2012) so all client certificates issued by this subordinate
> CA
> will have a longer expiration date. According to this MS article, i should
> be
> able to renew it by right clicking on the sub CA server and select renew.
>
>
http://technet2.microsoft.com/windowsserver/en/library/4fbf053c-c0ae-4fad-a29d-1d17f04cd5fc1033.mspx?mfr=true
>
> After the renewal request, the subordinate CA didn't get a renewed
> certificate. The root CA server on the other hand did show that the new
> certificate has been issued. But the subordinate server just didn't get
> it
> no matter how many times i restarted the server.
>
> I need help!!

This question belongs in the security newsgroup. I have copied them in on
this question.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.






Similar ThreadsPosted
Demote Root CA to subordinate - lose existing certs? February 26, 2008, 11:28 pm
Which certificate do I have to deploy ? Root CA or Subordinate CA certificate ? March 26, 2008, 6:20 am
Permissions on root c of AD & exchange server August 18, 2005, 1:45 am
PKI Certificate Server Install in AD Empty Root Domain July 21, 2005, 10:42 am
Earn money Online - without risk! December 24, 2005, 10:13 pm
Kerberos Ticket Renewal Problem June 8, 2006, 1:48 am
Online request of a certificate with CA in another domain January 26, 2007, 11:39 am
Clean Space 9-The best way to protect Online Privacy March 6, 2006, 9:32 pm
Kerberos Ticket Renewal Problem with SC Logon May 30, 2006, 7:05 am
Online Poker Pays! Learn All The Secrets Now!NBP Unregistered. October 30, 2005, 5:22 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap