Certificate Store and Authority

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

ericms - 11 Apr 2006 07:18 GMT

I am new to X.509 Certificate. Can someone explain what are the store and
authority ? How to set each one up ? etc.

Reply to this Message

Pablo Cibraro - 11 Apr 2006 14:26 GMT

Hi,

This article from the "Web Services Security Guide" may help you,

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/WSS
_Ch1_BrokAuthX509.asp

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax

>I am new to X.509 Certificate. Can someone explain what are the store and
> authority ? How to set each one up ? etc.

Reply to this Message

ericms - 11 Apr 2006 17:24 GMT

Thanks. My next question is about the Certificate Authority. X.509
certificate is endorsed and issued by a trusted third party also known as
Certificate Authority.

1) Does this mean that in order to use X.509 Certificate, we will have to
request a certificate from an outside party that issues certificates. If so,
who are these third parties. Is it possible to have our own Certificate
Authority in house within our company/corporate.

2) Will we need to request separate certificate for each client that will
consume our web service.

Thanks,
Eric.-

> Hi,
>
[quoted text clipped - 8 lines]
> >I am new to X.509 Certificate. Can someone explain what are the store and
> > authority ? How to set each one up ? etc.

Reply to this Message

Pablo Cibraro - 11 Apr 2006 19:01 GMT

Hi Eric,

1. No, that is not necessary. Your company can issue its own certificates,
using for example the "Microsoft Certificate Server" product.
You can use those certificates with other companies as long the other
companies trust your company.

2. No, that depends on the way you identify your clients.
If you will authenticate your clients by means of a X509 Certificate, then
you will have request a separate certificate for each one.
You can find different alternatives to authenticate a client in the the link
I sent you in the previous mail.

Regards,
Pablo Cibraro.

> Thanks. My next question is about the Certificate Authority. X.509
> certificate is endorsed and issued by a trusted third party also known as
[quoted text clipped - 25 lines]
>> >and
>> > authority ? How to set each one up ? etc.

Reply to this Message

ericms - 11 Apr 2006 19:20 GMT

Hi Pablo,

So, "Microsoft Certificate Server" is the certificate store as well as the
certificate authority ?

Thanks,
Eric.-

> Hi Eric,
>
[quoted text clipped - 41 lines]
> >> >and
> >> > authority ? How to set each one up ? etc.

Reply to this Message

Pablo Cibraro - 12 Apr 2006 14:39 GMT

More and less, "Microsoft Certificate Server" is the authority who emits the
certificates.
Then, you can store that certificate in different places, such as Active
directory, your machine or other supported store.

Does it make sense ?

Regards,
Pablo.

> Hi Pablo,
>
[quoted text clipped - 58 lines]
>> >> >and
>> >> > authority ? How to set each one up ? etc.

Reply to this Message

ericms - 12 Apr 2006 15:19 GMT

It certainly makes sense now. I really appreciate for your explanation.

Thanks,
Eric.-

> More and less, "Microsoft Certificate Server" is the authority who emits the
> certificates.
[quoted text clipped - 68 lines]
> >> >> >and
> >> >> > authority ? How to set each one up ? etc.

Reply to this Message

Certificate Store and Authority

Free Magazines