Set Up Certificate Services

• When setting up Microsoft Certificate Services on a server several decisions need to be made.
  • Which machine should become the certificate server.
  • Decide among the different types of certifying authorities.
  • Whether to install Web enrollment.
  • Public and private key pair.
    • Cryptographic service provider.
    • Key length.
    • Hash algorithm.
  • Identifying information:
    • Certifying authority name.
    • Distinguished name suffix.
    • The length of time the certificate should be valid.
  • Database and configuration storage.
  • Creating an issuer policy statement for the certifying authority.

On which machine should Certificate Services be installed?

---

---

© 2006 John Michael Pierobon

Notes