|
Posted by Paul Adare on September 12, 2007, 6:41 am
Please log in for more thread options
On Tue, 11 Sep 2007 18:03:46 +0530, Kris wrote:
> I have installed two Win2003 Standard edition servers. I use one as a
> standalone root CA. The second is a standalone (no enterprise)
> subordinate CA.
>
> In the root CA I can succesfully change the CApolicy.inf file to make
> the Root CA certificate keyusage field 'critical' and have the
> following value: 'Certificate Signing, Off-line CRL Signing, CRL
> Signing (06)'
>
> I want to achieve the same for the Subordinate CA, but the same
> parameters I used for the Root don't work in the Sub. CApolicy.inf
> file. Or in any other policy.inf file for that matter.
>
> ex.
> [Extensions]
> ;The Extensions section marks the KeyUsage as critical
> 2.5.29.15=AwIBBg==
> Critical=2.5.29.15
>
> Can anyone help?
Before you issue the subordinate CA certificate you need to run the
following command on the root CA:
certutil -setreg policy\EditFlags -EDITF_ADDOLDKEYUSAGE
--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
Your fault -- core dumped.
| 
XML Sitemap