MikeAdams
Fri Mar 18 09:31:07 CST 2005
I get the standard two choices.
MS RSA Schannel Cryptographic Provider
MS DH Schannel Cryptographic Provider V1.0
ACS is Ciscos Radius server. It needs a web server Certificate that has a
CSP of "Microsoft Base Cryptographic Provider V1.0"
Here are the instructions I got from Cisco.
1. Start > Run > certtmpl.msc
2. Right-click "Web Server" template and choose Duplicate Template
3. Name the template something easy to identify like ACS.
4. Go to the Request Handling tab and check â??Allow private key to be
exportedâ??.
5. Click on the CSPs button and check â??Microsoft Base Cryptographic Provider
v1.0â??
and click OK.
6. All other options can be left at default.
7. Click Apply and OK.
8. Open the CA MMC snap-in.
9. Right-click Certificate Templates and choose New > Certificate Template
to Issue.
10. Choose the new template you created and click OK.
11. Restart the CA.
Here is the Problem. Step 10 fails because the new Certificate that was
made does not show up. I have tried this on 2 different Domains.
Thanks
"David Cross [MS]" wrote:
> what choice do you get?
>
> what is a Cisco ACS server?
>
> --
> David B. Cross [MS]
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> Top Whitepapers:
>
> Auto-enrollment whitepaper:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
>
> Best Practices for implementing Windows Server 2003 PKI:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
>
> Troubleshooting Certificate Status and Revocation whitepaper:
>
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
>
> Windows Server 2003 web enrollment and troubleshooting guide:
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
> "Mike Adams" <MikeAdams@discussions.microsoft.com> wrote in message
> news:7635820F-D518-43CE-8FEB-DC0AF922C145@microsoft.com...
> >I am trying to add a web Server Ceritificate Template to my Cisco ACS
> > server. I am running CA on a Windows 2k3 box. When I pick Web Server as
> > my
> > template I should be able to pick Microsoft Base Cryptographic Provider
> > V1.0
> > as my CSP. I don't get that choice. Please help
>
>
>