Certificate Services

[Griff389]

Hi all,

I want to get a cert installed on our firewall so that when people browse to it from the local lan, Ie doesn't keep complaing there's a problem with the certificate.

So I'm looking at installing a CA on our Active Directory and issuing it a Self Signed Cert. (At least that's what I assume I need to do instead of buying a 3rd party one).

If I install the Cert Services on one of our domain controllers, will that stop anything from working. Am I right in thinking that things will still work, clients will still be able to access everything etc. Nothing is suddenly going to 'require' a cert in order to function is it?

Sorry if these sound like daft questions, it's the first time i've looked at certificates, and don't want to install cert services and then find nothing now works.

Cheers

Griff

 

[UTechnical]

I don't believe adding a CA to your domain will negatively affect the current environment. As far as the firewall goes, you will still need to tell the workstations that access the firewall to trust your internal CA, which is probably just as much trouble as just adding the current certificate to the trusted issuers store. The easiest way to resolve the firewall issue is to just buy a trusted 3rd party certificate

Eric

http://www.upscaletechnical.com

 

[58sniper]

I agree. A $30 GoDaddy cert would work fine, and wouldn't cause any untrusted cert issues.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[ITPangaeaArchitect]

There will be no impact by adding a CA whatsoever. Certs can then be deployed using autoenrollment with ease...

You will have to configure that firewall most likely to point to the internal CA though...


- Brandon Wilson
MCSE:Security00/03; MCSA:Security03
MCSA:Messaging00; MCP; A+
IT Pangaea (

http://it-pangaea.com)

 

[Griff389]

Thanks for the replies guys.