Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Root CA in Production -[WP]
Root CA in Production -[WP] [message #157110] Tue, 30 June 2009 14:28 Go to next message
WildPacket  is currently offline WildPacket
Messages: 130
Registered: July 2009
Senior Member
I was able to deploy Root CA in the lab running on a Member Server Windows
2003 Enterprise. All went cool. This was one one forest with one domain

Now its time to deploy in the production.

We have 2 domains in a forest. Domain A and Domain B.

I will/wantto install the Root CA in Domain B.

I will use this to assign certificates for our WiFi Users using Windows 2003
RADIUS/IAS.

Are there are areas I need to look out for or any specific config .....any
tips are welcome??

Thank you.
Re: Root CA in Production -[WP] [message #157118 is a reply to message #157110] Tue, 30 June 2009 21:37 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
In news:F45AA7BD-BC98-48F6-B037-5A6DFD624BE7@microsoft.com,
WildPacket <WildPacket@discussions.microsoft.com>, posted the following, which I replied to down below...: Hello WildPacket
> I was able to deploy Root CA in the lab running on a Member Server
> Windows 2003 Enterprise. All went cool. This was one one forest
> with one domain
>
> Now its time to deploy in the production.
>
> We have 2 domains in a forest. Domain A and Domain B.
>
> I will/wantto install the Root CA in Domain B.
>
> I will use this to assign certificates for our WiFi Users using
> Windows 2003 RADIUS/IAS.
>
> Are there are areas I need to look out for or any specific config
> .....any tips are welcome??
>
> Thank you.

It's been two years since I set one up in a multi-domain forest with an offline root, but I do remember that the cert template needs to have 'allow' from users' groups in each domain. However, I'm not sure if I provided the following previously, but take a look.

AD CS Step-By-Step Guide (about setting up a CA with wireless and autoenrollment):
http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=443 15BFF-B744-4637-A66B-E69B4955EE45&displaylang=en

Ace
Re: Root CA in Production -[WP] [message #157155 is a reply to message #157110] Wed, 01 July 2009 08:47 Go to previous message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
"WildPacket" <WildPacket@discussions.microsoft.com> wrote in message
news:F45AA7BD-BC98-48F6-B037-5A6DFD624BE7@microsoft.com...
>
> I was able to deploy Root CA in the lab running on a Member Server Windows
> 2003 Enterprise. All went cool. This was one one forest with one domain
>
> Now its time to deploy in the production.
>
> We have 2 domains in a forest. Domain A and Domain B.
>
> I will/wantto install the Root CA in Domain B.
>
> I will use this to assign certificates for our WiFi Users using Windows
> 2003
> RADIUS/IAS.
>
> Are there are areas I need to look out for or any specific config .....any
> tips are welcome??
>
> Thank you.
>

This would be best covered in the Security NewsGroup.

I have copied them in on this question.


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.
Previous Topic:issue with DC replication
Next Topic:Sense of Fashion is Social Marketplace
Goto Forum:
  


Current Time: Fri Oct 20 03:12:18 EDT 2017

Total time taken to generate the page: 0.03117 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software