Configure The Indentifying Information

• The identity of the certifying authority needs careful planning.
  • Once configured it should not be changed.
  • The identity should be considered to be permanent.

• Considerations for the CA name include:
  • Active Directory object names are limited to 64 characters by the LDAP standard.
    • The name of the CA will also be the common name of the CA's distinguished name in Active Directory.
  • Use only alphanumeric characters in the name.

What should be the certificate lifespan?

---

---

© 2006 John Michael Pierobon

Notes