Certificate Enrollment on behalf of others on a W2003 Standard Server

[Guest Christian Valentin FlexSecure Gm]

Hello.

 

I want to request a certificate on behalf of others on a W2k3 Standard

Server (via the Web Frontend and via the Crypto API in C#).

As far as i know the only way to do so is with an enrollment agent.

All my tries so far were not successful.

Anyone has experience with this topic ?

I would be glad about help.

 

Best regards

 

 

 

--

Dipl. Inform.

Christian Valentin

FlexSecure GmbH Darmstadt

Tel: 06151 5012318

Fax: 06151 5012319

Web: www.flexsecure.de

[Guest Brian Komar \(MVP\)]

Yes, you are correct.

You must have an enrollment agent to put some one else's name in the

certificate.

The signing certificate must have the Certificate Request Agent application

policy OID.

You need to provide more details to find out why it is not working for you.

Brian

 

"Christian Valentin FlexSecure GmbH" <valentin@flexitrust.de> wrote in

message news:%23PHtRjT0IHA.6096@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

>

> Hello.

>

> I want to request a certificate on behalf of others on a W2k3 Standard

> Server (via the Web Frontend and via the Crypto API in C#).

> As far as i know the only way to do so is with an enrollment agent.

> All my tries so far were not successful.

> Anyone has experience with this topic ?

> I would be glad about help.

>

> Best regards

>

>

>

> --

> Dipl. Inform.

> Christian Valentin

> FlexSecure GmbH Darmstadt

> Tel: 06151 5012318

> Fax: 06151 5012319

> Web: www.flexsecure.de

>

> </span>

[Guest Christian Valentin FlexSecure Gm]

Thanks, i advanced a bit further now, but this leads to my next question.

 

I want to create an enrollment angent signed CMC request in C#.

As far as i understand the MSDN pages, an enrollment agent signed CMC

request can only be implemented in C++, not in VB nor C# and so.

 

Anyone can confirm this ?

 

Thanks in advance

cv

 

 

--

Dipl. Inform.

Christian Valentin

FlexSecure GmbH Darmstadt

Tel: 06151 5012318

Fax: 06151 5012319

Web: www.flexsecure.de

"Brian Komar (MVP)" <brian.komar@nospam.identit.ca> schrieb im Newsbeitrag

news:3B2D75CD-5B14-4B9B-B4AD-4EEDEB897F54@microsoft.com...<span style="color:blue">

> Yes, you are correct.

> You must have an enrollment agent to put some one else's name in the

> certificate.

> The signing certificate must have the Certificate Request Agent</span>

application<span style="color:blue">

> policy OID.

> You need to provide more details to find out why it is not working for</span>

you.<span style="color:blue">

> Brian

>

> "Christian Valentin FlexSecure GmbH" <valentin@flexitrust.de> wrote in

> message news:%23PHtRjT0IHA.6096@TK2MSFTNGP06.phx.gbl...<span style="color:green">

> >

> > Hello.

> >

> > I want to request a certificate on behalf of others on a W2k3 Standard

> > Server (via the Web Frontend and via the Crypto API in C#).

> > As far as i know the only way to do so is with an enrollment agent.

> > All my tries so far were not successful.

> > Anyone has experience with this topic ?

> > I would be glad about help.

> >

> > Best regards

> >

> >

> >

> > --

> > Dipl. Inform.

> > Christian Valentin

> > FlexSecure GmbH Darmstadt

> > Tel: 06151 5012318

> > Fax: 06151 5012319

> > Web: www.flexsecure.de

> >

> ></span>

></span>