.. Use Enterprise if you are issuing internal for users etc.. as
it is integrated with AD/DNS. Standalone is not. There is a check
box somewhere about reusing existing keys. Go to the web page
I sent at Microsoft and it explains things in detail.
Kent
--- William Smith <[EMAIL PROTECTED]> wrote:
> Stand Alone Root CA--> Enterprise CA/Root CA--> Enterprise
> Subordinate CA
> |
> |
> |
> Stand Alone Sub CA
>
> One thing I'm not sure of is if the Enterprise CA should be a root CA
> or a
> subordinate CA to the Stand Alone Root CA. I've tried both ways with
> the
> same errors as mentioned below.
>
> W
>
> -----Original Message-----
> From: Kent Spencer [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 05, 2001 12:50 PM
> To: NT System Admin Issues
> Subject: Re: _Certificate Authority issues
>
>
> .. little confused. Is your root CA an Enterprise Root CA? How many
> other CA's other than the root? IIRC Enterprise Root CA are native
> mode only.
>
> Kent
>
> --- William Smith <[EMAIL PROTECTED]> wrote:
> > Windows 2000 Server sp2
> >
> > Attempting to install a subordinate CA under an existing Root CA.
> The
> > subordinate CA had the CA services installed on it at one time but
> > they were
> > uninstalled through add/remove windows components. Below is the
> error
> > message I get after choosing "Enterprise sub CA", filling in CA ID
> > information, attempted advanced and no advanced option.
> >
> > Message 1:
> > The private key "<servername>" already exists. Do you want to
> > overwrite this
> > key with a new one?
> > ((yes))((no))
> > -I select yes.
> >
> > Message 2: An error occurred when generating key "<servername>" for
> > the
> > Certificate Services service. Either the CSP configuration is not
> > complete
> > or the key length is not supported. Please make sure the CSP is
> > installed
> > correctly or select another CSP.
> > An internal error occurred. 0x80090020 (-2146893792)
> > ((Ok))
> >
> > Also, I've gone into the mmc certificates plug in and removed any
> > certificates that I added or were not part of the base install.
> >
> > Any suggestions would be appreciated.
> >
> > William L. Smith
> > Systems Administrator
> >
> > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
> >
>
>
> __________________________________________________
> Do You Yahoo!?
> Get email alerts & NEW webcam video instant messaging with Yahoo!
> Messenger
> http://im.yahoo.com
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger
http://im.yahoo.com
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
