Certificate Enrollment on behalf of others on a W2003 Standard Server

[Christian Valentin FlexSecure Gm]

Hello.

I want to request a certificate on behalf of others on a W2k3 Standard
Server (via the Web Frontend and via the Crypto API in C#).
As far as i know the only way to do so is with an enrollment agent.
All my tries so far were not successful.
Anyone has experience with this topic ?
I would be glad about help.

Best regards



--
Dipl. Inform.
Christian Valentin
FlexSecure GmbH Darmstadt
Tel: 06151 5012318
Fax: 06151 5012319
Web: www.flexsecure.de

 

[Brian Komar \(MVP\)]

Yes, you are correct.
You must have an enrollment agent to put some one else's name in the
certificate.
The signing certificate must have the Certificate Request Agent application
policy OID.
You need to provide more details to find out why it is not working for you.
Brian

"Christian Valentin FlexSecure GmbH" wrote in
message news:%23PHtRjT0IHA.6096@TK2MSFTNGP06.phx.gbl...
>
> Hello.
>
> I want to request a certificate on behalf of others on a W2k3 Standard
> Server (via the Web Frontend and via the Crypto API in C#).
> As far as i know the only way to do so is with an enrollment agent.
> All my tries so far were not successful.
> Anyone has experience with this topic ?
> I would be glad about help.
>
> Best regards
>
>
>
> --
> Dipl. Inform.
> Christian Valentin
> FlexSecure GmbH Darmstadt
> Tel: 06151 5012318
> Fax: 06151 5012319
> Web: www.flexsecure.de
>
>

 

[Christian Valentin FlexSecure Gm]

Thanks, i advanced a bit further now, but this leads to my next question.

I want to create an enrollment angent signed CMC request in C#.
As far as i understand the MSDN pages, an enrollment agent signed CMC
request can only be implemented in C++, not in VB nor C# and so.

Anyone can confirm this ?

Thanks in advance
cv


--
Dipl. Inform.
Christian Valentin
FlexSecure GmbH Darmstadt
Tel: 06151 5012318
Fax: 06151 5012319
Web: www.flexsecure.de
"Brian Komar (MVP)" schrieb im Newsbeitrag
news:3B2D75CD-5B14-4B9B-B4AD-4EEDEB897F54@microsoft.com...
> Yes, you are correct.
> You must have an enrollment agent to put some one else's name in the
> certificate.
> The signing certificate must have the Certificate Request Agent
application
> policy OID.
> You need to provide more details to find out why it is not working for
you.
> Brian
>
> "Christian Valentin FlexSecure GmbH" wrote in
> message news:%23PHtRjT0IHA.6096@TK2MSFTNGP06.phx.gbl...
> >
> > Hello.
> >
> > I want to request a certificate on behalf of others on a W2k3 Standard
> > Server (via the Web Frontend and via the Crypto API in C#).
> > As far as i know the only way to do so is with an enrollment agent.
> > All my tries so far were not successful.
> > Anyone has experience with this topic ?
> > I would be glad about help.
> >
> > Best regards
> >
> >
> >
> > --
> > Dipl. Inform.
> > Christian Valentin
> > FlexSecure GmbH Darmstadt
> > Tel: 06151 5012318
> > Fax: 06151 5012319
> > Web: www.flexsecure.de
> >
> >
>