Wednesday, 16 September 2009

MS Certificate Authority 2003

Setup
  • Create CAPolicy.inf in %Windir% Folder
  • CAPolicy.inf Content:
    [Version]
    Signature= "$Windows NT$"

    [certsrv_server]
    RenewalKeyLength=4096
    RenewalValidityPeriod=Years
    RenewalValidityPeriodUnits=20

    [PolicyStatementExtension]
    Policies = AllIssuancePolicy

    [AllIssuancePolicy]

    [CRLDistributionPoint]
    Empty = true

    [AuthorityInformationAccess]
    Empty = true
  • Add & Remove Programms to Install CA

No comments: