Re: certificate server

Hello David,

I will crosspost this to:
microsoft.public.windows.server.security

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> We have a windows 2003 active directory, with an exchange 2003
> organization. We had a certificate server which was also a DC. It had
> an unrecoverable error some months ago. We could have domain working
> as we have more DCs, but we are still using a certificate for OWA and
> RPC over https created by the certificate server.
>
> I have some problems with public folder replication, because of the
> lack of this certificate erver. We also have some problems to navigate
> through the Exchange System administration console, concretely the
> public folders.
>
> I also have some problems in the domain controllers, Event viewer
> says: "Automatic certificate inscriptions failed for Local System,
> cannot inscribe a DC certificate. RPC server is not available" (Sorry,
> this is a myself translation from Spanish)
>
> Now I've noticed that the certificate will expire in a few months.
>
> I would like to change this certificate, and make it work in the
> domain and the Exchange System, so I can solve this problems.
>
> Which is the best way? Should I install a new certificate server? How
> I can I solve those replication problems? Is there any thing I should
> keep in mind before trying a new certificate server?
>
> Thank you very much for your answers.
>
> Kind Regards.
>
> David Fernández.
>

Hello,

I have a new question.

If I remove my CA from the domain, and create a new one, will the
certificate that I created with the old one work until I create a new
certificate and install it on the server?

Thank you for your answers.

Kind regards



"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> escribió en el mensaje
news: .com...
> Hello David,
>
> I will crosspost this to:
> microsoft.public.windows.server.security
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi,
>>
>> We have a windows 2003 active directory, with an exchange 2003
>> organization. We had a certificate server which was also a DC. It had
>> an unrecoverable error some months ago. We could have domain working
>> as we have more DCs, but we are still using a certificate for OWA and
>> RPC over https created by the certificate server.
>>
>> I have some problems with public folder replication, because of the
>> lack of this certificate erver. We also have some problems to navigate
>> through the Exchange System administration console, concretely the
>> public folders.
>>
>> I also have some problems in the domain controllers, Event viewer
>> says: "Automatic certificate inscriptions failed for Local System,
>> cannot inscribe a DC certificate. RPC server is not available" (Sorry,
>> this is a myself translation from Spanish)
>>
>> Now I've noticed that the certificate will expire in a few months.
>>
>> I would like to change this certificate, and make it work in the
>> domain and the Exchange System, so I can solve this problems.
>>
>> Which is the best way? Should I install a new certificate server? How
>> I can I solve those replication problems? Is there any thing I should
>> keep in mind before trying a new certificate server?
>>
>> Thank you very much for your answers.
>>
>> Kind Regards.
>>
>> David Fernández.
>>
>
>

No. You need to maintain certificate revocation lists for all previously
issued certificatese until they are replaced.,
This would have to be maintained until the last previously issued
certificate expires.
Brian

"David Fernandez" <> wrote in message
news:%...
> Hello,
>
> I have a new question.
>
> If I remove my CA from the domain, and create a new one, will the
> certificate that I created with the old one work until I create a new
> certificate and install it on the server?
>
> Thank you for your answers.
>
> Kind regards
>
>
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> escribió en el mensaje
> news: .com...
>> Hello David,
>>
>> I will crosspost this to:
>> microsoft.public.windows.server.security
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Hi,
>>>
>>> We have a windows 2003 active directory, with an exchange 2003
>>> organization. We had a certificate server which was also a DC. It had
>>> an unrecoverable error some months ago. We could have domain working
>>> as we have more DCs, but we are still using a certificate for OWA and
>>> RPC over https created by the certificate server.
>>>
>>> I have some problems with public folder replication, because of the
>>> lack of this certificate erver. We also have some problems to navigate
>>> through the Exchange System administration console, concretely the
>>> public folders.
>>>
>>> I also have some problems in the domain controllers, Event viewer
>>> says: "Automatic certificate inscriptions failed for Local System,
>>> cannot inscribe a DC certificate. RPC server is not available" (Sorry,
>>> this is a myself translation from Spanish)
>>>
>>> Now I've noticed that the certificate will expire in a few months.
>>>
>>> I would like to change this certificate, and make it work in the
>>> domain and the Exchange System, so I can solve this problems.
>>>
>>> Which is the best way? Should I install a new certificate server? How
>>> I can I solve those replication problems? Is there any thing I should
>>> keep in mind before trying a new certificate server?
>>>
>>> Thank you very much for your answers.
>>>
>>> Kind Regards.
>>>
>>> David Fernández.
>>>
>>
>>
>
>