Root CA Cert Not Added to Trusted Root Authorities under XP/WM6 (Works On Vista) - PKI deployed via Active Directory
hi, i have created internal pki offline root , online enterprise intermediate ca under windows server 2008.
i have deployed certificates active directory per microsoft pki infrastructure book. have strange problem in 2 root , issuing certificates added fine vista machines , root cert added trusted root certificate authorities store expected.
however the windows xp clients joined same domain have 2 certificates under intermediate certificate authorities root certificate not listed under root certificate authorities store, certificates therefore untrusted machine. the same applies to windows mobile 6 (when installing manually), install root cert clicking on , says certificates have been installed when check cert in intermediate store , no trusted root cert has been added.
i haven't clue what's going on, same active directory domain vista boxes seem work fine. cant find error messages on server nor xp client.
the certs can viewed here:
http://www.monsterserve.net/certs/issuing.cer
http://www.monsterserve.net/certs/root.cer
http://www.monsterserve.net/certs/root+issuing.p7b (i manually exported entire chain here testing).
have done wrong or generated unsuported certificates? ideas how can above certs installed under windows mobile trusted root store , xp?
many in advance,
chris
only windows vista , windows server 2008 support cng.
you have create root certificate sha256 signature, cannot used or trusted xp.
xp sp3 can validate certificate, cannot consume it.
you have created, lack of better term, vista/2008 pki.
you need re-created pki using sha1 signature now.
again, discussed in chapter 1, @ later date, when clients running vista , servers 2008 or operating systens other 2003 support cng (this excludes mobile well), can change signing hash algorithm
brian
Windows Server > Security
Comments
Post a Comment