Enterprise or Standalone CA for Windows and linux computers

Hi
i plan to deploy a certificate architecture mainly for our internal web server and no more receive the certificate warning pop up
So first i will install an offline Root CA
Then i will setup a subordinate CA
My question is about the type : standalone or Enterprise since i have both Linux and Windows computers ... maybe an enterprise AND a standalone to manage both ?
Thanks for your help

The easiest way (but not the most secure of course) is to install IIS on the enterprise sub CA with single website serving static content. Then set CA to publish the CRL in the directory where website is pointing. Add CDP location as follows:
http://caname.contoso.com/<crl file name> where CRL file name is the name under which CRL is published.
Keep in mind that since you'll have offline root CA to set CRL expiration time to some long period (you'll need to publish it again before the expiration time occur, so 2 days for an example is not okey.). Also the enterprise CA will publish new CRL on very
short period and you must ensure it will be accessible by all clients ASAP (Not to mention delta CRL where publishing period is even shorter).
The type of the CA (standalone or enterprise) has nothing to do with the CRL publishing (except that Enterprise can publish in Active Directory automatically, standalone only on file system). Both can have ldap://, file:// or http:// CDP and AIA endpoints.
It's up to you to send the CRL file to this point. Also as Zelliptic says, any web server (IIS, Apache, Ngenx, etc) can serve as CRL/AIA endpoint - it's just static files at all.

Similar Messages

  • Oracle10G and oracle11gr1 for windows and Linux

    Hi
    Can you help me in getting these Softwares
    Oracle10G and oracle11gr1 for windows and Linux ,I am unable to get them .
    Thanks in advance
    Sanjeev Sen

    Oracle10G NOT SUPPORTED ANYMORE,NO SOFTWARE AVAILABLE TO DOWNLOAD TOO
    oracle11gr1 for windows and Linux > http://www.oracle.com/technetwork/database/enterprise-edition/downloads/index.html

  • File Path for Windows and Linux

    hi can any one give solution how to implement code for odi file copy .
    i am using Same Code for Windows and Linux
    OdiFileCopy "-FILE=#Var_Lookup_File_Path \ Employee.csv" "-TOFILE=#Var_Lookup_File_Path_Backup\Employee.csv" "-RECURSE=NO" "-OVERWRITE=YES" "-CASESENS=NO"
    the problem of above code is
    it is working in windows but my Prod is Linux environment.
    in linux \ not works.. / will work
    please suggest how to concatnate variable and file without' \' '/'

    Thanks Phani
    i think in OS command also we may give path like #variable\File Name.
    So how it will replace \ with / in Linux.
    Could you give code for my Scenario..
    Thanks for helping

  • How is the performance of Mac Pro if i use it as host for windows and linux virtual machines.

    How is the performance of Mac Pro if i use it as host for windows and linux virtual machines.
    I am planning to buy a high performance PC to run my Windows and Linux servers as vitrual machines for my testing purposes.
    Initially i planned to build my own computer with recommended configurations but considering space constaints and cooling factors i think Mac Pro can be a choice. But need some inputs if Mac pro (Intel Xeon E5, 12 GB RAM) is good for running virtual Machines.

    You could even run Windows natively and still run your VM servers.
    I have seen reports and such on MacRumors and elsewhere - run Windows natively as well as VMs (can also do testing and run Mavericks in a VM under Mavericks)
    The fast internal PCIe-SSD, plus 6 or 8 cores, and 32-64GB RAM. Of course for $5,000 for 8-core, some Thunderbolt storage and 32GB/64GB RAM you can buy some serious hardware.

  • Need tuxedo8.1 license of type SDK (for windows and linux)

    CMDTUX_CAT:4382: ERROR: You do not have a valid SDK license
    I get this error when running this command -buildserver.
    I downloaded the entire 8.1 package and found that it had a license of type RTK
    I want a License of type SDK with JOLT.
    If anyone has one, please do send me.
    I need SDK license for 8.1 and/or 9.1 (windows and/or linux).
    If anyone has a license of SDK type, please send me. My mail ID: [email protected]
    Also, how do we update the license in window?
    thanks in advance,
    Anish Kumar

    Hi Anish,
    Assuming you are covered by the appropriate licenses, you may download license keys for Tuxedo and related products here . Append the license key files you require into a single file called lic.txt and place it in the udataobj directory of the Tuxedo installation.
    Regards,
    Todd Little
    Oracle Tuxedo Chief Architect

  • External library Same name of lib for windows and linux

    I have a VI library, under Windows. This library contains a bunch of SubVI who call our libAPI.dll We are currently adding support for Linux. And, thus, have the equivalent for our libAPI.dll which is libAPI.so for Linux. Is it possible to use a generic name in the field for Library name or path API (without .dll or .so). So that when we will create of Linux version of this library we wont have to edit all of the Library name or path for each VI. We already tried to use the subVIs under Linux. Labview asked to locate libAPI.dll. If we choose libAPI.dll, then it works fine, but we do not want to have a question asked to the user about locating API.dll under Linux.
    Regards,
    Nitrof

    Use "libAPI.*" in the call library function node configuration page.

  • 11g For Windows and Linux 32 Now available for Download

    for your information only ;)

    Have not been able to learn all the ins and outs for 10g yet....~:))
    Ben

  • Multiplataform Licens? Windows and Linux

    Can the same licens of 10g 2 work for windows and linux envieromment, or it is necesary to buy different licens for windows and other different for linux. thanks

    Hi,
    As far as I know, if you will install and use ORACLE RDBMS software both on Windows and on Linux, you must have separate licenses for Windows and Linux.
    However, if you have installed the Oracle DB software on Windows only and you want to transfer your database to a Linux box, then you do not have to buy another license. This is of course the same if you're going from Linux to Windows. But not both at the same time.
    You will have to obtain new CD Install Packs to migrate from platform to another.

  • Where can I down load older versions of FireFox for windows and Mac for testing my application? I need to have copies of version 3, 4 and 5.

    My tesm develops .net applications that must support many browsers and we need access to download older versions of FireFox for windows and mac computers, so that we can test our application prior to rolling out a new version.
    Where can I download older versions of FireFox

    Firefox 3.5 is an antique version that is chock-full of security vulnerabilities.<br>
    Firefox 3.6 also contains security vulnerabilities; it stopped being supported on April 24.
    * [https://www.mozilla.org/security/known-vulnerabilities/ www.mozilla.org/security/known-vulnerabilities/]
    If you can't run the latest version because your system doesn't meet the requirements, it's highly recommended that you use another browser that is secure. TenFourFox is a third-party build of Firefox that is kept up-to-date and runs on Mac OS X 10.4 and PowerPC Macs (as a side note, I've never seen the site go down; whatever problems James noticed 9 months ago must've been a fluke).
    * [http://www.floodgap.com/software/tenfourfox/ www.floodgap.com/software/tenfourfox/]
    If your system can run the latest version, but you want to downgrade because you've experienced problems, please start a new thread and someone will try to help you.
    If you understand the security risks but want to downgrade anyway,
    * Firefox 3.6: [http://www.mozilla.com/firefox/all-older.html www.mozilla.com/firefox/all-older.html]
    * Firefox 3.5: [ftp://archive.mozilla.org/pub/mozilla.org/firefox/releases/3.5.19/ ftp://archive.mozilla.org/pub/mozilla.org/firefox/releases/3.5.19/]

  • I wonder to know what is the enterprise solution for windows and application event log management and analyzer

    Hi
    I wonder to know what is the enterprise solution for windows and application event log management and analyzer.
    I have recently research and find two application that seems to be profession ,1-manageengine eventlog analyzer, 2- Solarwinds LEM(Solarwind Log & Event Manager).
    I Want to know the point of view of Microsoft expert and give me their experience and solutions.
    thanks in advance.

    Consider MS System Center 2012.
    Rgds

  • Using Oracle driver in JDBC for Unix and Linux based servers

    Please, let me know how to mention the Oracle driver within the forName.class(" "); statement in the Jdbc-Servlet for Unix and Linux based servers.
    I'm using Windows-OS for Java programming. Should I have to use the same environment(Unix/Linux with Oracle) for compiling or just compiling, mentioning the driver in the java program would suffice?
    Please, Help me.
    Thank You.
    from,
    Silas eschole.
    email: [email protected]
    [email protected]

    I've used Oracle's thin driver like this:
    Class.forName ( "oracle.jdbc.driver.OracleDriver" );
    Connection DBConnection = DriverManager.getConnection("jdbc:oracle:thin:USER/PASSWD@database" );
    You need Oracles client classes ( e.g. classes111.zip ) at run time, not during compilation.
    Thin client connects directly to the Oracle DB, so the database description is like PORT:MACHINE:SID
    Connection is made through Oracle's listener even when your DB is in the same machine that your program is running. Port number is propably 1521 or 1526, depending on your listener.ora definitions and used Oracle SQL*Net version.

  • Applet colors for Mac and Linux?!

    I've got an applet where I use Color(int, int, int) to set background colors of components. Running the applet on Windows in Netscape or Explorer gives the expected colors. But in Mac and Linux the backgrounds are only white (using Netscape or Explorer).
    Does anybody know why, and how I could set colors to be shown also for Mac and Linux?
    /Johan

    I doesn't seem to help using predefined colors, like 'red', 'blue', etc...

  • Dual booting in Windows and Linux, but only Linux has calendar, TB 31.0

    I'm dual booting using Linux Mint and Windows 7. I have TB 31.0 installed in each OS. TB in Linux has calendar capability; in Windows, there's nothing (by nothing, I mean no calendars - I can't see their properties, for instance, nor access them in any way).
    I should add that both Windows and Linux TB programs are sharing the same profile folder (located on a separate partition), hence, all the same add-ons, passwords, etc.
    The error console logs the following:
    Timestamp: 14/08/2014 6:41:33 PM
    Error: Components.classes[cid] is undefined
    Source File: resource://calendar/modules/calUtils.jsm -> file:///P:/PortableApps/ThunderbirdPortable/Data/profile/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/calendar-js/calUtils.js
    Line: 17
    There are a variety of flow on errors, related to this.
    My apologies for posting this in this way; I had intended to submit this via the crashreporter, but I'm having trouble getting the program to crash with this error just now.

    A reply to my own question: it turns out that while sharing a profile works pretty well for most purposes, with Lightning it does not, as the extension has different Linux and Windows versions. The problem is solved quite simply: by not using the same profile for each version.
    Glad to see that no one wasted time on this one (except me, of course).

  • RMI-server works on Windows and Linux but not on Solaris

    I wrote an application which uses RMI. The server is successfully tested on Windows and Linux. However it doesn't work on Solaris.
    Naming.lookup works, I can find the server. But calling a method on my remote interface causes a ConnectionException:
    java.rmi.ConnectException: Connection refused to host: 192.168.1.123; nested exception is:
         java.net.ConnectException: Connection refused: connect
         at sun.rmi.transport.tcp.TCPEndpoint.newSocket(Unknown Source)
         at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)
         at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)
         at sun.rmi.server.UnicastRef.newCall(Unknown Source)
         at at.triton.javaengine.server.ServerImpl_Stub.connectToWindow(Unknown Source)
         at at.triton.javaengine.client.JavaEngineClient.connectToWindow(JavaEngineClient.java:288)
         at at.triton.javaengine.client.JavaEngineClient.main(JavaEngineClient.java:787)
    Caused by: java.net.ConnectException: Connection refused: connect
         at java.net.PlainSocketImpl.socketConnect(Native Method)
         at java.net.PlainSocketImpl.doConnect(Unknown Source)
         at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
         at java.net.PlainSocketImpl.connect(Unknown Source)
         at java.net.SocksSocketImpl.connect(Unknown Source)
         at java.net.Socket.connect(Unknown Source)
         at java.net.Socket.connect(Unknown Source)
         at java.net.Socket.<init>(Unknown Source)
         at java.net.Socket.<init>(Unknown Source)
         at sun.rmi.transport.proxy.RMIDirectSocketFactory.createSocket(Unknown Source)
         at sun.rmi.transport.proxy.RMIMasterSocketFactory.createSocket(Unknown Source)
         ... 7 moreNote that I have almost no experience with Solaris.
    Additional information about the common pitfalls which I have already checked:
    * rmiregistry finds the server classes (the exception was different without them)
    * the server is in the LAN and the desktop firewall of the client is double-checked to let the required ports through to any destination.

    java.rmi.ConnectException: Connection refused tohost: >192.168.1.123; nested exception is:
    java.net.ConnectException: Connection refused:
    : connect
    Clearly indicates what is happening inside there.Clearly indicates that you don't know what you are talking about.
    Any applications invoked with a security manager must
    be granted explicit permission to access local system
    resources apart from read access to the directory and
    its subdirectories where the program is invoked.Any application that gets a java.net.ConnectionException: Connection
    refused is getting it more or less directly from the TCP/IP stack. If the problem had anything to do with policies and permissions and SecurityManagers, it would have been an AccessControlException .
    if your client RMI doesnt include these lines then If your 'client RMI' does include these lines then I would like a definition of what exactly a 'client RMI' really is, because I've been using RMI for ten years and wrote a book about it and I certainly don't know.
    1)just include these lines
    if (System.getSecurityManager() == null) {
    System.setSecurityManager(new
    SecurityManager());In other words, if the application doesn't already have a security manager, in which case the contents of the policy file or the 'client RMI', or whatever you want to call it, are completely irrelevant, such that they couldn't possibly be having the problem you desrcribe, add a security manager so that we get into the land where you might possibly know what you're talking about?
    e a policy file
    grant {
    permission java.net.SocketPermission
    "192.168.1.123:1099", "accept,connect,resolve";
    };And this is completely unnecessary if there isn't a security manager, and completely unrelated to the OP's problem.

  • HT5634 Windows and Linux on a PowerPC G5 1.6 GHz 768 MB RAM,  no Intel  processor?!!!!!

    I have a PowerPC G5 1.6 GHz 768 MB RAM,  no Intel  processor, and I run OSX 10.5.8. I have installed a 932 Gig slave drive and partitioned it in 4 blocks.
    Can I find a Boot Camp version for my computer and install Windows and Linux on my slave drive? How? Please tell me what downloads I need and instruct me.   [....and the URLs please]
    Can I install OS Maverick on one of thee HD partitions?
    thx much-

    OvidD wrote:
    Is it possible to put in an Intel processor, maybe change the bus /add RAM?
    thx-
    If you are willing to spend money towards your problem, you are best off purchasing the most modern Intel based Mac that you can afford, albeit perhaps used or reconditioned, and run Windows and perhaps Mavericks there.
    Having been a longtime user of Virtual PC on my iMac G5, I would not wish that experience on my worst enemy now that Intel Macs are so prevalent!

Maybe you are looking for