Enterprise CA

[Sean]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi
Reading some articles to keep my external OWA access secure, I was pointed
to the Enterprise CA issue.
I have two Domain Controllers - one of them is a Enterprise Subordinate CA
(the Enterprice CA is on a external domain in the same organization)
I've tried to use it as my Certificate Authority to validate external OWA
access using SSL but I'm not able to export the PKs with the certificate from
this CA to install on my ISA because this option is unavailable.
I'm thinking to install a Enterprise CA in the another Domain Controller but
I'm not sure if it could cause some conflict or some similar in my internal
and external network.

I'm using W2K SP4 and ISA 2000 SP1

Thanks

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

For the type of certificate you need try to logon to the ISA server and
request it through the mmc certificates snapin for computer by going to the
personal folder and right click, select all tasks/request new certificate..
You must be logged onto the server as an administrator and it must be a
member of the domain to do it that way. Otherwise you can use Web Enrollment
if it is enabled by logging onto the server and entering
http://yourCA/certsrv . --- Steve

http://www.microsoft.com/windows2000/techinfo/planning/security/cawebsteps.asp
-- Web Enrollment.

"Sean" <Sean@discussions.microsoft.com> wrote in message
news99BB21E-91D0-48C9-9AC3-BC396A2CA677@microsoft.com...
> Hi
> Reading some articles to keep my external OWA access secure, I was pointed
> to the Enterprise CA issue.
> I have two Domain Controllers - one of them is a Enterprise Subordinate CA
> (the Enterprice CA is on a external domain in the same organization)
> I've tried to use it as my Certificate Authority to validate external OWA
> access using SSL but I'm not able to export the PKs with the certificate
> from
> this CA to install on my ISA because this option is unavailable.
> I'm thinking to install a Enterprise CA in the another Domain Controller
> but
> I'm not sure if it could cause some conflict or some similar in my
> internal
> and external network.
>
> I'm using W2K SP4 and ISA 2000 SP1
>
> Thanks
>
>