digital Singing

[Lus]

hi dears

for securing my network i wana use Digital Signing. but i don't know how ?

i have domain.

install Enterprise root CA.

enable auto enrollment via group policy.

now how could i build this specifice certificate ?

i did not see any usefull tamplate ?

plz help.

Edited April 2, 2006 by Lus

[LLXX]

I think you meant "signing"?? I was expecting something more related to sound...

[Lus]

sorry. i am not good in english !

i think u answer my Q

Edited April 2, 2006 by Lus

[cluberti]

If you're talking about IPSEC communications between AD machines, this may be what you're looking for:

http://www.petri.co.il/configuring_ipsec_p...through_gpo.htm

If you're talking about using certificates for authentication on the domain, then I think this may help you:

http://support.microsoft.com/?kbid=272175

I'd suggest doing both, for security .

[Lus]

thankx cluberti.

i know IPSEC and how to impelementing this.

my problem is : If i want publish new certificate, for spesific reasone like " allow some users to use EFS " what should i do ?

[cluberti]

That's a very broad question, and perhaps you are unaware that it is . I would strongly recommend visiting the link below to get a better idea on how to implement Windows 200x PKI:

http://www.microsoft.com/technet/prodtechn...t/2000cert.mspx