Permissions requried to request a certificate.

[Guest Gunna]

I have a simple question im sure has been answered before. I have dupicated

a certificate template for publishing. WHat permissions on the security tab

do the users need to see the template in the Web enrollment page and

therefore request the cert

 

There are:

Full Control

Read

Write

Enroll

Autoenroll

 

I have set Read, Enroll and Autoenroll. Do they need write?

[Guest Paul Adare - MVP]

On Mon, 8 Sep 2008 18:07:04 -0700, Gunna wrote:

<span style="color:blue">

> I have a simple question im sure has been answered before. I have dupicated

> a certificate template for publishing. WHat permissions on the security tab

> do the users need to see the template in the Web enrollment page and

> therefore request the cert

>

> There are:

> Full Control

> Read

> Write

> Enroll

> Autoenroll

>

> I have set Read, Enroll and Autoenroll. Do they need write?</span>

 

Only Read and Enroll.

 

--

Paul Adare

MVP - Identity Lifecycle Manager

http://www.identit.ca

Base 8 is just like base 10, if you are missing two fingers. -- Tom

Lehrer

[Guest Gunna]

Thanks Paul,

 

Unfortunately that makes my problem more mysterious. Im right i saying a

Web Server Certificate can be requested via the Web enrollment?

 

"Paul Adare - MVP" wrote:

<span style="color:blue">

> On Mon, 8 Sep 2008 18:07:04 -0700, Gunna wrote:

> <span style="color:green">

> > I have a simple question im sure has been answered before. I have dupicated

> > a certificate template for publishing. WHat permissions on the security tab

> > do the users need to see the template in the Web enrollment page and

> > therefore request the cert

> >

> > There are:

> > Full Control

> > Read

> > Write

> > Enroll

> > Autoenroll

> >

> > I have set Read, Enroll and Autoenroll. Do they need write?</span>

>

> Only Read and Enroll.

>

> --

> Paul Adare

> MVP - Identity Lifecycle Manager

> http://www.identit.ca

> Base 8 is just like base 10, if you are missing two fingers. -- Tom

> Lehrer

> </span>

[Guest Paul Adare - MVP]

On Mon, 8 Sep 2008 19:39:15 -0700, Gunna wrote:

<span style="color:blue">

> Unfortunately that makes my problem more mysterious. Im right i saying a

> Web Server Certificate can be requested via the Web enrollment?</span>

 

You can request a web server certificate through web enrollment, however,

you have to make sure that the template is configured to supply the subject

name in the request.

 

--

Paul Adare

MVP - Identity Lifecycle Manager

http://www.identit.ca

Byte: A mouthful, as in "How many bytes in a Big Mac?"