urgent! certificates with serialNumber attribute in subject

hi,

We are using a microsoft certificate authority. We want to look into the
possibility to issue certificates with use of the serialnumber attribute set
in the subject of the certificate holder. I have tried to use the
certificate enrollment API without success. The certificate server seems to
ignore serialNumber field (and also dnQualifier field) and issue the
certificate without these fields in it. I have allso tried to make a custom
pkcs10 request with openssl, the same happens, the certificate is issued,
but the serialNumber field is ignored when issued.

QUESTION: How can i make the Windows Certificate Authority able to issue
certificates with the serialNumber attribute set?

best regards,
kaare

David
Tue Jun 29 23:31:22 CDT 2004

there is a limited set of subject RDN elements that are allowed. you have
to enable in the cert server:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx


--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Kaare Langedrag" <idontlikespam@ergo.no> wrote in message
news:eAnzJxbXEHA.3420@TK2MSFTNGP12.phx.gbl...
> hi,
>
> We are using a microsoft certificate authority. We want to look into the
> possibility to issue certificates with use of the serialnumber attribute
set
> in the subject of the certificate holder. I have tried to use the
> certificate enrollment API without success. The certificate server seems
to
> ignore serialNumber field (and also dnQualifier field) and issue the
> certificate without these fields in it. I have allso tried to make a
custom
> pkcs10 request with openssl, the same happens, the certificate is issued,
> but the serialNumber field is ignored when issued.
>
> QUESTION: How can i make the Windows Certificate Authority able to issue
> certificates with the serialNumber attribute set?
>
> best regards,
> kaare
>
>