| Author |
Message |
Serge Ayotte
Guest
|
 Posted:
Fri Jan 07, 2005 1:35 am Post subject:
How to determine which Certificate server is installed |
|
|
HI have taken over a network build by multiple consultants, so as you
can guest, there is NO documentation.
I have found that there is a Certificate Server install, but I am
unsure on how I can determine if this was installed as an ENTERPRISE
CA or Stand Alone, so my posting.
How can I determine the type of CA that is on the server (the DC of
the domain).
Thanks in advance for all input and pointers to KB articles!
Serge Ayotte
(Remove the SPOUM from the domain) |
|
| Back to top |
|
 |
Phillip Renouf
Guest
|
| Posted:
Fri Jan 07, 2005 2:07 am Post subject:
RE: How to determine which Certificate server is installed |
|
|
I believe that an Enterprise CA will copy itself into the Trusted Root
Certification Authorities, but a Stand-Alone CA will not.
I am not 100% sure of this and I don't have the time to check up on it right
now unfortunately. Do some searching on MS's site or Google about that topic
and you should be able to confirm my hunch.
Phil
"Serge Ayotte" wrote:
| Quote: | HI have taken over a network build by multiple consultants, so as you
can guest, there is NO documentation.
I have found that there is a Certificate Server install, but I am
unsure on how I can determine if this was installed as an ENTERPRISE
CA or Stand Alone, so my posting.
How can I determine the type of CA that is on the server (the DC of
the domain).
Thanks in advance for all input and pointers to KB articles!
Serge Ayotte
(Remove the SPOUM from the domain)
|
|
|
| Back to top |
|
|
lazyadmin
Guest
|
| Posted:
Fri Jan 07, 2005 4:46 am Post subject:
Re: How to determine which Certificate server is installed |
|
|
You remember correctly. Enterprise CA's are automatically added to the
trusted root however an administrator has to explicitly distribute the
stand-alone CA's certificate to the trusted root.
--
Rod
http://thelazyadmin.com
"Phillip Renouf" <PhillipRenouf@discussions.microsoft.com> wrote in message
news:71C52666-6298-42C0-AD88-898E505DC13A@microsoft.com...
| Quote: | I believe that an Enterprise CA will copy itself into the Trusted Root
Certification Authorities, but a Stand-Alone CA will not.
I am not 100% sure of this and I don't have the time to check up on it
right
now unfortunately. Do some searching on MS's site or Google about that
topic
and you should be able to confirm my hunch.
Phil
"Serge Ayotte" wrote:
HI have taken over a network build by multiple consultants, so as you
can guest, there is NO documentation.
I have found that there is a Certificate Server install, but I am
unsure on how I can determine if this was installed as an ENTERPRISE
CA or Stand Alone, so my posting.
How can I determine the type of CA that is on the server (the DC of
the domain).
Thanks in advance for all input and pointers to KB articles!
Serge Ayotte
(Remove the SPOUM from the domain)
|
|
|
| Back to top |
|
|
Shreeniwas Kelkar [MSFT]
Guest
|
| Posted:
Fri Jan 07, 2005 4:56 am Post subject:
Re: How to determine which Certificate server is installed |
|
|
Run the command "certutil" in a cmd window. This will enumerate all the CAs
in the domain.
Then run "certutil /config "<config string from above command>" /cainfo".
This will identify the CA type.
--
Shreeniwas Kelkar [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Serge Ayotte" <sergea@SPOUM.groupesci.com> wrote in message
news:fo4rt01v41qsa1a100be15kbiiqcir4dej@4ax.com...
| Quote: | HI have taken over a network build by multiple consultants, so as you
can guest, there is NO documentation.
I have found that there is a Certificate Server install, but I am
unsure on how I can determine if this was installed as an ENTERPRISE
CA or Stand Alone, so my posting.
How can I determine the type of CA that is on the server (the DC of
the domain).
Thanks in advance for all input and pointers to KB articles!
Serge Ayotte
(Remove the SPOUM from the domain) |
|
|
| Back to top |
|
|
Serge Ayotte
Guest
|
| Posted:
Fri Jan 07, 2005 7:55 pm Post subject:
Re: How to determine which Certificate server is installed |
|
|
THANKS!! this did the trick, so now I know what I have!
Serge
On Thu, 6 Jan 2005 14:56:40 -0800, "Shreeniwas Kelkar [MSFT]"
<skelkar@online.microsoft.com> wrote:
| Quote: | Run the command "certutil" in a cmd window. This will enumerate all the CAs
in the domain.
Then run "certutil /config "<config string from above command>" /cainfo".
This will identify the CA type. |
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in