| Author |
Message |
sf
Guest
|
Posted:
Fri Oct 21, 2005 8:35 am Post subject:
Certificate Template Name: CA |
|
|
Hi,
I'm trying to configure a Enterprise Certificate authority (Windows
Server 2003, Enterprise Edition) and need to customize the root
certificate. I'm aware that I can set certain
parameters in capolicy.inf.
I'd like to remove "Certificate Template Name: CA" from root
certificate, how do I do this?
Many thanks in advance for any help. |
|
| Back to top |
|
 |
Paul Adare
Guest
|
Posted:
Fri Oct 21, 2005 8:51 am Post subject:
Re: Certificate Template Name: CA |
|
|
In article <1129882674.455224.49800@g43g2000cwa.googlegroups.com>, in
the microsoft.public.windows.server.security news group, sf
<security.faq@gmail.com> says...
| Quote: | Our company has decided to deploy a Windows Server 2003 PKI hierarchy
and we need to have root certificate without "Certificate Template
Name" extension.
|
You haven't answered my question. Why do you feel that you need to
remove that extension?
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea |
|
| Back to top |
|
 |
sf
Guest
|
Posted:
Fri Oct 21, 2005 8:51 am Post subject:
Re: Certificate Template Name: CA |
|
|
Our company has decided to deploy a Windows Server 2003 PKI hierarchy
and we need to have root certificate without "Certificate Template
Name" extension. |
|
| Back to top |
|
 |
Paul Adare
Guest
|
Posted:
Fri Oct 21, 2005 8:51 am Post subject:
Re: Certificate Template Name: CA |
|
|
In article <1129865734.825634.327020@o13g2000cwo.googlegroups.com>, in
the microsoft.public.windows.server.security news group, sf
<security.faq@gmail.com> says...
| Quote: | I'm trying to configure a Enterprise Certificate authority (Windows
Server 2003, Enterprise Edition) and need to customize the root
certificate. I'm aware that I can set certain
parameters in capolicy.inf.
I'd like to remove "Certificate Template Name: CA" from root
certificate, how do I do this?
|
I don't believe that is possible for a root certificate. To disable
certificate extensions you need to set a registry entry which then
affects certificates that are issued by that CA. Since Certificate
Services aren't installed yet for a root, this obviously won't work.
What's the driver for wanting this change?
--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea |
|
| Back to top |
|
 |
|
|
|
|