How can I, instead of self-signing the certs for each
server, have them signed by a CA that is accepted by
default in browsers.
Non AD environment currently as well.
Thanks.

Re: Can have a CA that is accepted by default in browsers? by Matt

Matt
Tue Jul 13 11:34:32 CDT 2004

Sean,
Which browsers are you referring to? If you mean IE, then a server
(SSL) certificate signed by one of the trusted root authorities such as
VeriSign, Thawte, GTE, etc. would be automatically trusted by client
systems.
--
Matt Clapham
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.

"Sean" <smurray@sherwin.com> wrote in message
news:2bd1401c468ee$7172f180$a501280a@phx.gbl...
> How can I, instead of self-signing the certs for each
> server, have them signed by a CA that is accepted by
> default in browsers.
> Non AD environment currently as well.
> Thanks.



Re: Can have a CA that is accepted by default in browsers? by Sean

Sean
Tue Jul 13 14:33:10 CDT 2004

Matt,

Yes, IE6 is what we are using. We have managed servers in
house and when we hit the secure management page we get
the security notice.
I usually install it into my root on the PC, but was asked
by someone else to see if there was a way for them to
automatically be trusted so he does not have to see that
each time.
Cert is issued to and by each server as well.
Thanks.

>-----Original Message-----
>Sean,
> Which browsers are you referring to? If you mean IE,
then a server
>(SSL) certificate signed by one of the trusted root
authorities such as
>VeriSign, Thawte, GTE, etc. would be automatically
trusted by client
>systems.
>--
>Matt Clapham
>Microsoft Corporation
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>"Sean" <smurray@sherwin.com> wrote in message
>news:2bd1401c468ee$7172f180$a501280a@phx.gbl...
>> How can I, instead of self-signing the certs for each
>> server, have them signed by a CA that is accepted by
>> default in browsers.
>> Non AD environment currently as well.
>> Thanks.
>
>
>.
>

Re: Can have a CA that is accepted by default in browsers? by S

S
Wed Jul 14 04:53:04 CDT 2004

You can add the CA that has issued the cert to the enterprise trust list
(managed throug AD) - that will cover the enterprise. For external clients,
a cert from a commercial CA only will help.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"Sean" <smurray@sherwin.com> wrote in message
news:2cc0201c46910$3b622ee0$a301280a@phx.gbl...
> Matt,
>
> Yes, IE6 is what we are using. We have managed servers in
> house and when we hit the secure management page we get
> the security notice.
> I usually install it into my root on the PC, but was asked
> by someone else to see if there was a way for them to
> automatically be trusted so he does not have to see that
> each time.
> Cert is issued to and by each server as well.
> Thanks.
>
> >-----Original Message-----
> >Sean,
> > Which browsers are you referring to? If you mean IE,
> then a server
> >(SSL) certificate signed by one of the trusted root
> authorities such as
> >VeriSign, Thawte, GTE, etc. would be automatically
> trusted by client
> >systems.
> >--
> >Matt Clapham
> >Microsoft Corporation
> >
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >
> >"Sean" <smurray@sherwin.com> wrote in message
> >news:2bd1401c468ee$7172f180$a501280a@phx.gbl...
> >> How can I, instead of self-signing the certs for each
> >> server, have them signed by a CA that is accepted by
> >> default in browsers.
> >> Non AD environment currently as well.
> >> Thanks.
> >
> >
> >.
> >