| Author |
Message |
Yannick Béot
Guest
|
 Posted:
Mon Dec 13, 2004 10:29 pm Post subject:
Who issued the certificate |
|
|
Hi,
On a win2k3 certificate service, I wonder who issued a certificate.
The log report does not seem to save this piece of information.
I look in the list of issued certificates, I have a field "issuer name
ID" put it is written "v0.0" which means nothing to me.
So, is it possible to know who issued a certificate?
thanks in advance
Yannick |
|
| Back to top |
|
 |
Steven L Umbach
Guest
|
| Posted:
Tue Dec 14, 2004 8:45 am Post subject:
Re: Who issued the certificate |
|
|
You might want to check your CA properties/auditing to see if auditing for
issue and manage certificate requests is enabled for the future. If you have
autoenrollment enabled for a type two template, or auto request then maybe
the certificate was automatically enrolled or someone used EFS which issued
a certificate. Domain Controllers will also be able to request certificates
for themselves automatically I believe. If in doubt you can always revoke
the certificate and if you use certificate hold as the reason, you can
"unrevoke" it at a later time. --- Steve
"Yannick Béot" <yannick.beot@NOSPAM.free.fr> wrote in message
news:41bdc357$0$16061$626a14ce@news.free.fr...
| Quote: | Hi,
On a win2k3 certificate service, I wonder who issued a certificate.
The log report does not seem to save this piece of information.
I look in the list of issued certificates, I have a field "issuer name ID"
put it is written "v0.0" which means nothing to me.
So, is it possible to know who issued a certificate?
thanks in advance
Yannick |
|
|
| Back to top |
|
|
Paul Adare - MVP - Micros
Guest
|
| Posted:
Tue Dec 14, 2004 3:10 pm Post subject:
Re: Who issued the certificate |
|
|
In article <41bdc357$0$16061$626a14ce@news.free.fr>, in the
microsoft.public.windows.server.security news group, Yannick Béot
<yannick.beot@NOSPAM.free.fr> says...
| Quote: | Hi,
On a win2k3 certificate service, I wonder who issued a certificate.
The log report does not seem to save this piece of information.
|
Where are you looking at this information exactly? And what exactly do
you mean by "I wonder who issued a certificate"?
| Quote: | I look in the list of issued certificates, I have a field "issuer name
ID" put it is written "v0.0" which means nothing to me.
|
If you're looking at the CA itself, then all certificates in the Issued
Certificates node of the Certification Authority tool will have been
issued by the CA that the tool is focused on. If what you're really
looking for is who requested a certificate, that will be in the
Requester Name" field.
| Quote: |
So, is it possible to know who issued a certificate?
|
Of course it is. Open the certificate and look at the Issued by: test on
the General tab or the Issuer field on the Details tab.
I guess that I'm a little confused about what exactly you're looking for
here.
--
Paul Adare
"On two occasions, I have been asked [by members of Parliament],
'Pray, Mr. Babbage, if you put into the machine wrong figures,
will the right answers come out?' I am not able to rightly apprehend
the kind of confusion of ideas that could provoke such a question."
-- Charles Babbage (1791-1871) |
|
| Back to top |
|
|
Yannick Béot
Guest
|
| Posted:
Wed Dec 15, 2004 5:17 pm Post subject:
Re: Who issued the certificate |
|
|
Paul Adare - MVP - Microsoft Virtual PC wrote:
| Quote: | In article <41bdc357$0$16061$626a14ce@news.free.fr>, in the
microsoft.public.windows.server.security news group, Yannick Béot
yannick.beot@NOSPAM.free.fr> says...
Hi,
On a win2k3 certificate service, I wonder who issued a certificate.
The log report does not seem to save this piece of information.
Where are you looking at this information exactly? And what exactly do
you mean by "I wonder who issued a certificate"?
|
When I say "I wonder who issued a certificate", I mean which certificate
Manager accept the certificate request
I look in the log event of the Windows 2k3 Server, in the logs Security,
Application,...
I also look in the Certificate Authorities' logs through the
"Certificate Authority" mmc snap-in
In the category "certificates issued", I look for a field to display
which may give me this information for each certificates issued by this
authority
| Quote: | I look in the list of issued certificates, I have a field "issuer name
ID" put it is written "v0.0" which means nothing to me.
If you're looking at the CA itself, then all certificates in the Issued
Certificates node of the Certification Authority tool will have been
issued by the CA that the tool is focused on. If what you're really
looking for is who requested a certificate, that will be in the
Requester Name" field.
|
I hope it's clearer |
|
| Back to top |
|
|
Paul Adare - MVP - Micros
Guest
|
| Posted:
Wed Dec 15, 2004 6:00 pm Post subject:
Re: Who issued the certificate |
|
|
In article <41c01d2d$0$11920$636a15ce@news.free.fr>, in the
microsoft.public.windows.server.security news group, Yannick Béot
<yannick.beot@NOSPAM.free.fr> says...
| Quote: | When I say "I wonder who issued a certificate", I mean which certificate
Manager accept the certificate request
I look in the log event of the Windows 2k3 Server, in the logs Security,
Application,...
I also look in the Certificate Authorities' logs through the
"Certificate Authority" mmc snap-in
In the category "certificates issued", I look for a field to display
which may give me this information for each certificates issued by this
authority
|
Ok, so you're not looking for who issued the certificate (that is always
the CA itself), you're looking for who "approved" a certificate request
that had been pended to the CA. Add the Request Disposition Message
column to the Certification Authority snap-in. That will show what
you're looking for.
--
Paul Adare
"On two occasions, I have been asked [by members of Parliament],
'Pray, Mr. Babbage, if you put into the machine wrong figures,
will the right answers come out?' I am not able to rightly apprehend
the kind of confusion of ideas that could provoke such a question."
-- Charles Babbage (1791-1871) |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in