X.509 Certificates and Windows 2003 CA

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Garth Keesler - 02 Feb 2006 15:11 GMT

I am attempting to move an app from Kerberos to X.509 tokens issued by
the CA running on my test domain. Prob is, the User token gives the
error "Selected Certificate does not support Data Encryption." when I
try to select it in the "Client Certificate" wizard window. If I try
using a certificate designed for EFS, I get a similar popup stating that
the certificate "does not support Digital Signatures.".

Do I need to try a different type of certificate? Can CA issue the
correct type of signature?

Thanx,
Garth

Reply to this Message

Garth Keesler - 02 Feb 2006 16:24 GMT

Garth wrote:

> I am attempting to move an app from Kerberos to X.509 tokens issued by
> the CA running on my test domain. Prob is, the User token gives the
[quoted text clipped - 8 lines]
> Thanx,
> Garth

It appears that the 2003 Standard CA cannot issue version 2 templates
and version 1 templates may not be able to provide what I'm looking for.
They also can not be modified in the standard version of CA so I may
be out of luck.

Thanx,
Garth

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...