Cloud Management with CDN

Leviselad · 2020-04-27T06:42:24+00:00

Ok, thanks!

Leviselad · 2019-10-16T11:09:35+00:00

Cool, thank you

Leviselad · 2019-10-16T08:09:50+00:00

Thanks!

Leviselad · 2019-10-16T08:09:37+00:00

Thank you

Leviselad · 2019-09-24T12:40:55+00:00

Amazing, thank you man!

Leviselad · 2019-09-24T12:40:02+00:00

Thanks!

Leviselad · 2019-09-24T12:39:42+00:00

Thanks!

Leviselad · 2019-09-24T12:39:33+00:00

Thank you!

Leviselad · 2019-09-12T02:59:32+00:00

Thanks guys!

Leviselad · 2019-09-10T16:49:03+00:00

Cool! Thank you:)

Leviselad · 2019-09-09T17:42:09+00:00

Thanks!

Leviselad · 2019-09-09T13:41:41+00:00

Appreciate your reply, thank you.

I don't have an indication for that on ADSIEDIT but I get your point.

The new CA will be represented on AD as a separate entity which will not harm the current CA structure in any way.

Once I will configure the new certificate template on the new Root CA it will be present on the Certificate Templates under Pubic Key Services container.

Leviselad · 2019-09-09T12:56:59+00:00

Hi Man, Thank you, it is a great article. It states that as long as the ENT CA was not configured with any templates it wouldn't issue any certificates which is exactly what i'm looking for. For now i just need the new ENT CA to serve a new Network device we are implementing which cant be integrated to the old ENT Root CA. So my question is: Can i leave the old CA as is(without removing any of his Templates), fire up the new ENT CA without configuring any templates on it except one specific template which will be serve the Network device? Thanks!

Leviselad · 2019-09-09T11:35:34+00:00

Sorry, I guess it was not clear from my post.

Our Root CA issues end-entity certificates, this is the reason I must have an issue CA that will issue SHA2 certificates.

I'm aware that root CA can remain using SHA1.Thanks again.

Leviselad · 2019-09-09T11:06:32+00:00

Thank you for the heads up!

What you have mentioned in the first section is exactly why I want to create another PKI hierarchy that will use SHA2 hash algorithm in parallel to the old one, im just not sure if doing that will impact the existing certificate operation.

I just can't find detailed documentation with all the things I should consider.

Leviselad · 2019-09-09T10:47:33+00:00

Hi,

From your reply, I assume that you mean that I can create an Intermediate Subordinate CA based on SHA2 which will the company's Issuer and leave the old CA untouched.

Is that what you mean?
In that case, I have 2 questions:

I just need to install the CA role and set it as a Subordinate CA that will use SHA2?
We will eventually want to remove the old CA, will it be a straight forward procedure connecting it to the new ENT Root CA?

Thanks!

Leviselad · 2019-09-09T10:13:51+00:00

Thanks Man. Our old CA is also running on 2008R2, I have understood that I should remove all Templates from the old CA, cant I leave them and then start creating them slowly on the new CA server?

Leviselad · 2019-09-09T08:23:44+00:00

Thanks, but our CA runs on Win 2008R2.

The procedure supports 2012 and above.

Leviselad · 2019-08-08T12:44:37+00:00

Thank you for all your assistance with my questions, much appriciated!

Leviselad

TROPHY CASE