Re: CA Root Certs help with IE6 by Sean
Sean
Tue Jul 13 09:32:09 CDT 2004
Yes, I agree with the first statement. This is for all in
house servers though and some people find it an annoyance.
I just install the certs locally myself.
We Will be implementing AD in the near future which is
also why I asked. If there can be one store for all in the
AD to use.
Thanks.
>-----Original Message-----
>It wouldn't be much of security if you could enforce
trust to any bogus CA
>on the net. For that reason, users themselves must decide
which CA's they
>will trust.
>
>However, if you use Windows 2000/2003 Active Directory
domain, then you
>could set up Enterprise CA. Enterprise CA, unlike
standalone CA is
>automatically trusted by members of the AD domain. Non-
members, ie Workgroup
>users or users from untrusted domains would still need to
establish CA trust
>manually.
>
>Dusko Savatovic
>
>"Sean" <anonymous@discussions.microsoft.com> wrote in
message
>news:2c00d01c4684c$2864e2c0$a301280a@phx.gbl...
>> 'this CA root cert is not trusted. To enable trust,
>> instal...etc.'
>>
>> When I install it is fine. BUT, is there a way to have
it
>> automatically get installed without prompting?
>> Can I setup a central Cert Athorities Store to all read
>> from that?
>> Basically, we get prompted when attaching to other
servers
>> within our system when we try to connect to the
management
>> agent page. We don't want to be prompted and install it
>> manually each server.
>> Any help is appreciated.
>> Thanks.
>
>
>.
>