Re: 03 server cerificate

Hello Gerardo,

I will crosspost this to:
microsoft.public.windows.server.security

Better place to ask for CA.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi...
>
> I've a problem... Im running 2003 server std edition, server is set to
> give user certificates, which will be used for email encryption, when
> this certificates are handled they are good for 1 year only... I need
> to make them good for more time, I tried modifying the User
> Certificate Template but its greyed out, what can I do to make it last
> longer than 1 year?!
>
> regards
> Jerry

"Gerardo" <> wrote in message
news:442714fa-8ef7-46ff-9e2a-...
>
> I tried that, but none of the options match the user template I
> created before...

What version of Windows Server is the CA installed on that you tried
creating the template?

FYI, the CA must be Windows Server Enterprise Edition to be able to create
and use a V2 certificate template. Standard or SBS does not support this
version, hence probably why you are not seeing it available.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer


For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay

"Gerardo" <> wrote in message
news:675f9dab-3e7b-463a-8b42-...
Im indeed using Windows 2003 Server Standard Edition... I guess thats
my problem

Another question... if the certificate expires after 1 year, and a new
one is requested does it mean that all the emails encrypted with the
first one will be unreadable?!


I believe so. The certificate must be available, as well as the CA so it can
check the CRL (cert revocation list) or the cert won't work.

Yep, you need Enterprise. May as well pull out all the certs until you can
get Ent Edition running.

Ace

"Gerardo" <> wrote in message
news:16b1e31e-1221-40b9-a8e3-...
I used to request the certificates via a webpage http://x.x.x.x/certsrv
and it will show me an option that says: User Certificate and that was
it.

Now I'm testing on a 2003 enterprise box, and its showing a whole
bunch of options before requesting for the certificate, is it a way to
make it easier for the end users? like it used to be with the user
template?

Regards,
Jerry

========================

Jerry,

It's not that fact that Enterprise makes it easier, rather the fact that it
has the options that you need to construct your PKI infrastructure, such as
the v2 certificate template you need in order to create the certificates for
your user base. I hope that makes sense?

Ace