Certificate Services

Correct me if I am wrong:
I have created CA xyz. I have created web server
certificate. Now, I need client machines to trust this
CA, but I don't want to place private key CA on the client
machine(because it could be stolen and somebody could
impersonate me). From the mmc trusted root CA I exported
xyz into xyz.cer file.

Does xyz.cer contain public key?

If not, how do I export public key?

Thanks in advance

rjohnson
Fri Jan 09 17:52:49 CST 2004

"RG" <nobody@nowhere.com> writes:

> Does xyz.cer contain public key?
>
> If not, how do I export public key?

CER files contain the X.509 certificate, which includes the encoded
public key parameters. CER files never contain the private key.

--
Ryan D Johnson [MS]
rjohnson@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no
rights. Use of included script samples are subject to the terms
specified at http://www.microsoft.com/info/cpyright.htm

David
Sat Jan 10 09:19:48 CST 2004

you can just export the certifcate of the CA using the web pages (if
installed), the certifcates MMC for the local machine, there are several
methods. these should all be in the help files.

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/operate/ws3pkibp.asp

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"RG" <nobody@nowhere.com> wrote in message
news:eqzEzpu1DHA.2408@tk2msftngp13.phx.gbl...
> Correct me if I am wrong:
> I have created CA xyz. I have created web server
> certificate. Now, I need client machines to trust this
> CA, but I don't want to place private key CA on the client
> machine(because it could be stolen and somebody could
> impersonate me). From the mmc trusted root CA I exported
> xyz into xyz.cer file.
>
> Does xyz.cer contain public key?
>
> If not, how do I export public key?
>
> Thanks in advance
>
>