It is possible
to install and configure a CA on a Windows 2000 system, through a slightly different
procedure.
1. Click on Start, Control Panel, Add or Remove Programs.
2. Click on Add/Remove Windows Components.
3. Check the box labeled Certificate Services.
4. At the warning box, shown in Figure 12.6, click Yes to acknowledge that the server
name cannot be changed.
5. Click Next to continue.
From the subsequent dialog box, shown in Figure 12.7, select what type of certificate
authority is to be set up. Each choice of CA type has different ramifications, and each one
is useful in different situations. The following is a list of the types of CAs available for
installation:
. Enterprise root CA??”An enterprise root CA is the highest-level certificate authority
for an organization. By default, all members of the forest where it is installed trust it,
which can make it a convenient mechanism for securing OWA or other services
within a domain environment. Unless an existing enterprise root CA is in place, this
is the typical choice for a home-grown CA solution in an organization.
. Enterprise subordinate CA??”An enterprise subordinate CA is subordinate to an
existing enterprise root CA, and must receive a certificate from that root CA to work
properly.
Pages:
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537