RE: [ActiveDir] Certificate Services & AD

2005-11-07 Thread Devan Pala
Awesome, Thanks a lot Original Message Follows From: "Ken Schaefer" <[EMAIL PROTECTED]> Reply-To: ActiveDir@mail.activedir.org To: Subject: RE: [ActiveDir] Certificate Services & AD Date: Mon, 7 Nov 2005 15:03:41 +1100 Not a web resources, but I've found

RE: [ActiveDir] Certificate Services & AD

2005-11-07 Thread Fugleberg, David A
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog ies/security/ws3pkibp.mspx#EJAA is a 'best practices' guide that addresses some of this. It covers some of the high-level decisions, and then goes through a scenario for a three-tier CA hierarchy that you can reproduce in a l

RE: [ActiveDir] Certificate Services & AD

2005-11-06 Thread Ulf B. Simon-Weidner
Hello Devan, The book Ken references is pretty good, the author, Brian Komar, did a lot of PKI-Deployment at major companies across the US and the world, is a visiting speaker at a lot of conferences like TechEds and is MVP for Windows Security. His company is specialized in PKI-Deployments. He a

RE: [ActiveDir] Certificate Services & AD

2005-11-06 Thread Ken Schaefer
Not a web resources, but I've found this MS Press book to be a reasonably good primer. It covers hardware (to some extent), multiple levels of hierarchy, developing your certificate policies etc. http://www.amazon.com/exec/obidos/tg/detail/-/0735620210/ Microsoft Windows Server(TM) 2003 PKI and Ce